Which category includes tools such as Whois, Nslookup, and ARIN?

Which category includes tools such as Whois, Nslookup, and ARIN?

• A. Vulnerability scanners
• B. Exclusion frameworks
• C. Network footprinting tools
• D. Password crackers

Answer: (C)

Public information gathering is the upfront step in a security assessment, where you map what’s publicly visible about the target. Whois shows who owns a domain, who registered it, contact details, registration dates, and the authoritative DNS servers. Nslookup dives into the DNS system to resolve domain names to IPs and inspect DNS records like NS and MX that reveal the infrastructure behind a domain. ARIN provides registry data about who owns IP address blocks and how those addresses are allocated, including related ASN and organization information. Together, these tools expose the target’s footprint—the visible network boundaries, ownership, and routing information—without actively probing systems, which is why they fit in network footprinting tools. Vulnerability scanners look for exploitable gaps in systems, password crackers attempt to break credentials, and the other option isn’t relevant to this data-gathering activity.

Public information gathering is the upfront step in a security assessment, where you map what’s publicly visible about the target. Whois shows who owns a domain, who registered it, contact details, registration dates, and the authoritative DNS servers. Nslookup dives into the DNS system to resolve domain names to IPs and inspect DNS records like NS and MX that reveal the infrastructure behind a domain. ARIN provides registry data about who owns IP address blocks and how those addresses are allocated, including related ASN and organization information. Together, these tools expose the target’s footprint—the visible network boundaries, ownership, and routing information—without actively probing systems, which is why they fit in network footprinting tools. Vulnerability scanners look for exploitable gaps in systems, password crackers attempt to break credentials, and the other option isn’t relevant to this data-gathering activity.