Objective 1.1 Perform Reconnaissance on Target Systems and Networks. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   A security analyst wants to identify the operating system of a remote host by analyzing its responses to network probes. Which Nmap option should be used?

   • A-sn
   • B-sS
   • C-sV
   • D-O
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   A security tester configures a tool to act as an intermediary between a browser and a web application, allowing the tester to view and modify HTTP requests and responses. Which tool is being described?

   • APort scanner
   • BPacket sniffer
   • CVulnerability scanner
   • DWeb proxy
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Which of the following is a recommended practice for storing reconnaissance findings?

   • AKeeping all findings in an unencrypted text file on the desktop
   • BStoring findings only in memory
   • CDeleting findings after each scan to save space
   • DUsing a spreadsheet to track IP addresses, open ports, and services
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Why is it important to systematically record reconnaissance findings in a structured format like a spreadsheet or database?

   • ATo bypass firewall rules
   • BTo organize data for later analysis and reporting
   • CTo automatically exploit discovered vulnerabilities
   • DTo encrypt the target's data
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   While analyzing intercepted traffic with OWASP ZAP, a tester notices that a web application uses a session token that is predictable (e.g., incrementing numbers). The tester wants to test whether the application is vulnerable to session fixation. What should the tester do?

   • AUse ZAP's session token analysis to identify the token pattern and attempt to predict a valid session token.
   • BUse ZAP's fuzzer to send random session tokens and see if any are accepted.
   • CUse ZAP's active scanner to automatically test for session fixation.
   • DUse ZAP's spider to crawl the application and find session tokens in URLs.
   Reveal Solution Discussion Select an answer first