CompTIA CySA+ (CS0-003) — Question 523

A security analyst is trying to identify possible network addresses from different source networks belonging to the same company and region. Which of the following shell script functions could help achieve the goal?

Answer options

• A. function w() { a=$(ping -c 1 $1 | awk-F ”/” ’END{print $1}’) && echo “$1 | $a” }
• B. function x() { b=traceroute -m 40 $1 | awk ’END{print $1}’) && echo “$1 | $b” }
• C. function y() { dig $(dig -x $1 | grep PTR | tail -n 1 | awk -F ”.in-addr” ’{print $1}’).origin.asn.cymru.com TXT +short }
• D. function z() { c=$(geoiplookup$1) && echo “$1 | $c” }

Correct answer: C

Explanation

The correct answer is C because it utilizes the 'dig' command to perform a reverse DNS lookup and then queries the ASN database, which helps in identifying the organization associated with the IP address. Option A is incorrect as it only performs a ping, which does not provide network address information. Option B incorrectly uses traceroute without a proper command structure and fails to gather relevant network address data. Option D uses geoiplookup, which provides geographical information but does not specifically identify addresses from different networks within the same company.