When looking at some log files, Casey noticed some strange entries that involved a request to TCP port 53 and the string "AXFR."
What was the attacker attempting?
A) It was a common virus scan
B) Directory traversal
C) Verify the accounts on a mail server
D) Zone transfer

Question

Quizplus · Accepted Answer

For the CEH exam, be sure you can recognize certain items within log file or packet dumps. "AXFR"
always means "All Zone Transfer." Verifying accounts on an email server would be "VRFY."

When Looking at Some Log Files, Casey Noticed Some Strange