A library's internal DNS allows zone data leakage to the tester's approved network. How should that finding be framed?
Select an answer to reveal the explanation.
Short Explanation
DNS zone leakage is like getting the building directory with room numbers included. Hostnames and patterns sketch the whole campus layout. That is gold for enumeration — write it down even if you never change a record.
Full Explanation
DNS information can reveal host inventories, naming conventions, and service clues that accelerate later testing. Unauthorized or overly permissive zone data exposure to an approved tester network is a meaningful disclosure finding. Modification rights are not required to recognize leakage risk. DNS recon belongs in technical enumeration reporting, not only social-engineering discussions.