Which vulnerability would automatically fail due to DNS misconfiguration, such as DNS zone transfer issues?

Which vulnerability would automatically fail due to DNS misconfiguration, such as DNS zone transfer issues?

• A. Open Access to Databases from the Internet
• B. SQL injection
• C. Unrestricted DNS zone transfer
• D. Directory traversal on web server

Answer: (C)

DNS zone transfers are used to copy DNS zone data from a primary to secondary servers. If the DNS server is misconfigured to restrict or block zone transfers, the specific path an attacker would use to obtain the full zone data is blocked. That means the vulnerability of having an unrestricted DNS zone transfer would fail because the server won’t allow transferring the entire zone. Other issues listed—opening database access to the Internet, SQL injection, and directory traversal—are unrelated to how DNS handles zone transfers, so they aren’t automatically impacted by this DNS misconfiguration.

DNS zone transfers are used to copy DNS zone data from a primary to secondary servers. If the DNS server is misconfigured to restrict or block zone transfers, the specific path an attacker would use to obtain the full zone data is blocked. That means the vulnerability of having an unrestricted DNS zone transfer would fail because the server won’t allow transferring the entire zone. Other issues listed—opening database access to the Internet, SQL injection, and directory traversal—are unrelated to how DNS handles zone transfers, so they aren’t automatically impacted by this DNS misconfiguration.