Which of the following should the penetration tester conclude about the command output?

Last Updated on August 14, 2021 by Admin

A penetration tester is conducting an assessment on Comptia.org and runs the following command from a coffee shop while connected to the public Internet: c:\nslookup -querytype=MX comptia.org
Server: Unknown

Address: 198.51.100.45

comptia.org MX preference=10, mail exchanger = 92.68.102.33 comptia.org MX preference=20, mail exchanger = exchg1.comptia.org exchg1.comptia.org internet address = 192.168.102.67

Which of the following should the penetration tester conclude about the command output?

  • The public/private views on the Comptia.org DNS servers are misconfigured.
  • Comptia.org is running an older mail server, which may be vulnerable to exploits.
  • The DNS SPF records have not been updated for Comptia.org.
  • 192.168.102.67 is a backup mail server that may be more vulnerable to attack.