CompTIA PenTest+ (PT1-002) — Question 61

A penetration tester has established an on-path attack position and must now specially craft a DNS query response to be sent back to a target host. Which of the following utilities would BEST support this objective?

Answer options

• A. Socat
• B. tcpdump
• C. Scapy
• D. dig

Correct answer: C

Explanation

Scapy is the most suitable tool for crafting custom packets, including DNS query responses, due to its flexibility and ability to manipulate network packets. Socat is primarily used for establishing bidirectional data transfers, while tcpdump is a packet capture tool and dig is mainly for querying DNS records, making them less effective for this specific task.