What tool might be used by an attacker during the reconnaissance phase of an attack to glean information about domain registrations?

Question $2$ options:

Whois

Simple Network Management Protocol $($SNMP$)$

Ping

Domain Name System $($DNS$)$