In your own words ( NOT copy and pasting plagiarism), What is start of authority
ID: 3907308 • Letter: I
Question
In your own words (NOT copy and pasting plagiarism),
What is start of authority (SOA)? What is it used for? Why is this important as it relates to ethical hacking and security?
What is DNS Enumeration and why is it important?
What is social engineering? How can you use social engineering to carry out an attack?
Thank You!
Requirements for the person that will be answering the above question.
* Type out responses in Your Own Words!
* Do not write on paper and send a photo.
* NO plagiarism/ NO copy and pasting from outside sources without properly citing your sources.
** FAILURE to adhere to the stated requirements will result in thumbs down and will be reported to Chegg administration. **
Explanation / Answer
1. Start of Authority is a form of record which is store at the DNS zone, for that particular DNS record. It stores infromation about the DNS server like version of data, last update time, Info about secondary DNS servers and associate timestamps for changes.
Every domain should have a start of Authoriy record at the splitting point where the domain is deputed from its parent domain.
SOA provides essential information about the zone that the domain is in, the host name for the primary name server for the zone. An e-mail address of the person who is responsible for the domain. All these things make SOA essentially important in Ethical Hacking & Security.
2. DNS enumeration is the process of locating all the DNS servers and their corresponding records for an organization. DNS enumeration will yield usernames, computer names, and IP addresses of potential target systems. The list of DNS record provides an overview of types of resource records (database records) stored in the zone files of the Domain Name System (DNS). The DNS implements a distributed, hierarchical, and redundant database for information associated with Internet domain names and addresses.
Tools like nslookup, maltego, dnenum,dnsrecon can be used for DNS enumeration.
3. Social Engineering: It's a non technical way of obtaining information or gaining access to credentials of a person or any associate orgranization. It involves interacting with the target individual in a social way. Often the techniques used are such that the target is tricked into providing essential information unknowingly.
It could include posing as a fake IT support person and asking for credential, or posing as a bank official to ask for personal details/credentials.