GIAC Penetration Tester (GPEN) — Question 2

When DNS is being used for load balancing, why would a penetration tester choose to identify a scan target by its IP address rather than its host name?

Answer options

• A. Asingle IP may have multiple domains.
• B. A single domain name can only have one IP address.
• C. Scanning tools only recognize IP addresses
• D. A single domain name may have multiple IP addresses.

Correct answer: C

Explanation

The correct answer is C because scanning tools typically operate with IP addresses for direct communication with devices. Options A and D are incorrect as they discuss how domains and IPs can relate without addressing the scanning tools' functionality. Option B is wrong since a single domain can actually resolve to multiple IP addresses.