CompTIA PenTest+ (PT0-002) — Question 396

A penetration tester has established an on-path attack position and must now specially craft a DNS query response to be sent back to a target host.
Which of the following utilities would BEST support this objective?

Answer options

• A. Socat
• B. tcpdump
• C. Scapy
• D. dig

Correct answer: C

Explanation

Scapy is a powerful Python-based interactive packet manipulation program that allows users to craft and send custom packets, making it ideal for creating specific DNS responses. On the other hand, Socat is used for bidirectional data transfer, tcpdump is primarily for packet capturing, and dig is a DNS lookup utility, none of which provide the same level of packet crafting capability as Scapy.