CompTIA CASP+ (CAS-003) — Question 51

Company.org has requested a black-box security assessment be performed on key cyber terrain. One area of concern is the company's SMTP services. The security assessor wants to run reconnaissance before taking any additional action and wishes to determine which SMTP server is Internet-facing.
Which of the following commands should the assessor use to determine this information?

Answer options

Correct answer: A

Explanation

The correct command is A, as 'dnsrecon -d company.org -t SOA' helps identify the authoritative name servers for the domain, which is vital for understanding the SMTP setup. Option B, 'dig company.org mx', would provide MX records but not specifically identify the Internet-facing SMTP server. Option C, 'nc -v company.org', is more suited for checking connectivity rather than identifying SMTP servers, and Option D, 'whois company.org', retrieves registration information rather than specific service details.