Courseiva
Footprinting, Reconnaissance and ScanningeasyMultiple ChoiceObjective-mapped

CEH Footprinting, Reconnaissance and Scanning Practice Question

What is the PRIMARY purpose of performing a DNS zone transfer?

⚠ Common exam trap

EC-Council often tests the distinction between a zone transfer (full record replication) and a standard DNS query (single record lookup), so candidates mistakenly choose option C because they confuse reverse lookup with the bulk data retrieval of AXFR.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

To obtain all DNS records for a domain from an authoritative server

DNS zone transfer (AXFR) is a mechanism defined in RFC 1034 and 1035 that allows a secondary DNS server to replicate the entire zone file from a primary authoritative server. The primary purpose is to obtain all DNS records for a domain, which is critical for reconnaissance during the footprinting phase, as it reveals subdomains, mail servers, and other infrastructure without brute-forcing.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • To cache DNS queries locally

    Why it's wrong here

    DNS zone transfers are a mechanism for replicating entire zone files between authoritative DNS servers to ensure data consistency. Their purpose is not to cache individual DNS queries. Caching is typically performed by recursive DNS resolvers or client operating systems to speed up subsequent lookups for previously queried records, storing them temporarily based on their Time-To-Live (TTL) values. This process reduces network traffic and improves resolution performance for end-users.

  • To obtain all DNS records for a domain from an authoritative server

    Why this is correct

    The primary purpose of performing a DNS zone transfer (AXFR or IXFR) is to replicate the entire set of DNS resource records (RRs) for a specific domain from a primary authoritative DNS server to a secondary authoritative DNS server. This process ensures that all secondary servers have an up-to-date, complete copy of the zone file, enabling them to authoritatively answer queries for the domain even if the primary server is unavailable. For ethical hackers, a successful zone transfer can reveal extensive network topology information.

  • To resolve IP addresses to hostnames

    Why it's wrong here

    Resolving IP addresses to hostnames, also known as a reverse DNS lookup, is a function performed by DNS resolvers querying PTR records within in-addr.arpa or ip6.arpa zones. This is a standard, individual query operation, not the bulk data transfer mechanism of a DNS zone transfer. A zone transfer, conversely, involves the replication of an entire zone file, not the on-demand lookup of a single record type to map an IP to a hostname.

  • To verify the DNS server's response time

    Why it's wrong here

    Verifying a DNS server's response time is typically achieved through network performance tools like `ping`, `dig` with timing options, or specialized monitoring solutions that measure latency for individual queries. A DNS zone transfer, while involving network communication, is a data synchronization process between authoritative servers and is not designed or used as a metric for assessing the server's query response efficiency or overall performance under load. Its success indicates data integrity, not speed for individual lookups.

Visual reference

Client Recursive Resolver Root DNS (13 root servers) TLD DNS (.com, .org, …) Authoritative example.com query IP addr answer

About these practice questions

One of 870 original CEH practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This CEH practice question is part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CEH exam.