Security: Information Gathering

Question 1

DIG TYPES

Answer 1

A = IPV4 address record

AAAA = IPv6

CNAME = canonical name record

MX = mail exchange

PTR = pointer resource record

Question 2

DIG ERRORS

Answer 2

NO ERROR

SERVFAIL

NXDOMAIN

REFUSED

Question 3

NXDOMAIN Error

Answer 3

name queried does not exist and no authoritative DNS data to be served

Question 4

REFUSED Error

Answer 4

zone does not exist at the request authority and their infrastructure is not serving things that don’t exist at all

Question 5

Cyber Kill Chain steps

Answer 5

1. Reconnaissance
2. Intrusion
3. Exploitation
4. Privilege escalation
5. Lateral movement
6. Obfuscation/Anti-Forensics
7. Denial of Service
8. Exfiltration

Question 6

Three types of exploitation

Answer 6

1. Code
2. Misconfiguration
3. Human

Question 7

Code exploitation

Answer 7

taking advantage of a flaw within a program’s instructions and manipulating it in a manner that was not intended by the creators

Question 8

Misconfiguration

Answer 8

a system’s setting that allows it to be manipulated by an unintended source