A security consultant is performing a penetration test on www.comptia.org and wants to discover the DNS administrator's email address to use in a later social engineering attack. The information listed with the DNS registrar is private. Which of the following commands will also disclose the email address?
A) dig -h comptia.org
B) whois -f comptia.org
C) nslookup -type=SOA comptia.org
D) dnsrecon -i comptia.org -t hostmaster

Question

Quizplus · Accepted Answer

The "nslookup -type=SOA comptia.org" command queries the Start of Authority (SOA) record, which typically contains the DNS administrator's email address.

A Security Consultant Is Performing a Penetration Test on Www