CEH Footprinting, Reconnaissance and Scanning Practice Question
What is the PRIMARY purpose of performing a DNS zone transfer?
⚠ Common exam trap
EC-Council often tests the distinction between a zone transfer (full record replication) and a standard DNS query (single record lookup), so candidates mistakenly choose option C because they confuse reverse lookup with the bulk data retrieval of AXFR.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
To obtain all DNS records for a domain from an authoritative server
DNS zone transfer (AXFR) is a mechanism defined in RFC 1034 and 1035 that allows a secondary DNS server to replicate the entire zone file from a primary authoritative server. The primary purpose is to obtain all DNS records for a domain, which is critical for reconnaissance during the footprinting phase, as it reveals subdomains, mail servers, and other infrastructure without brute-forcing.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
To cache DNS queries locally
Why it's wrong here
DNS zone transfers are a mechanism for replicating entire zone files between authoritative DNS servers to ensure data consistency. Their purpose is not to cache individual DNS queries. Caching is typically performed by recursive DNS resolvers or client operating systems to speed up subsequent lookups for previously queried records, storing them temporarily based on their Time-To-Live (TTL) values. This process reduces network traffic and improves resolution performance for end-users.
- ✓
To obtain all DNS records for a domain from an authoritative server
Why this is correct
The primary purpose of performing a DNS zone transfer (AXFR or IXFR) is to replicate the entire set of DNS resource records (RRs) for a specific domain from a primary authoritative DNS server to a secondary authoritative DNS server. This process ensures that all secondary servers have an up-to-date, complete copy of the zone file, enabling them to authoritatively answer queries for the domain even if the primary server is unavailable. For ethical hackers, a successful zone transfer can reveal extensive network topology information.
- ✗
To resolve IP addresses to hostnames
Why it's wrong here
Resolving IP addresses to hostnames, also known as a reverse DNS lookup, is a function performed by DNS resolvers querying PTR records within in-addr.arpa or ip6.arpa zones. This is a standard, individual query operation, not the bulk data transfer mechanism of a DNS zone transfer. A zone transfer, conversely, involves the replication of an entire zone file, not the on-demand lookup of a single record type to map an IP to a hostname.
- ✗
To verify the DNS server's response time
Why it's wrong here
Verifying a DNS server's response time is typically achieved through network performance tools like `ping`, `dig` with timing options, or specialized monitoring solutions that measure latency for individual queries. A DNS zone transfer, while involving network communication, is a data synchronization process between authoritative servers and is not designed or used as a metric for assessing the server's query response efficiency or overall performance under load. Its success indicates data integrity, not speed for individual lookups.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 870 original CEH practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CEH practice question is part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CEH exam.