What is the primary role of the Dig tool in DNS operations?

• A. It is a firewall configuration tool.
• B. It is used to query DNS servers and can perform zone transfers.
• C. It is a protocol analyzer for Wi-Fi.
• D. It is a web server.

Answer: (B)

Dig is the DNS query tool used to interact with DNS servers. Its main role is to query DNS servers to obtain information about domain names—such as IP addresses (A records), mail servers (MX records), and authoritative name servers (NS records)—to diagnose how DNS is resolving a domain and to validate DNS configurations.

A standout capability is performing zone transfers, which copy DNS zone data from a primary server to a secondary server. With dig you can request an AXFR (full zone transfer) or IXFR (incremental zone transfer) to verify that the secondary has received the same records as the primary. This helps ensure DNS data consistency across servers and aids in troubleshooting replication issues.

This isn’t a firewall configuration tool, a protocol analyzer for Wi-Fi, or a web server, which are different utilities with unrelated roles.