Active and Passive Reconnaissance PT0-003 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which tool is commonly used to perform protocol scanning to identify open ports and services on a target network?

   • ASqlmap
   • BNessus
   • CHashcat
   • DNmap
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A penetration tester is sniffing network traffic on a segment and captures a large number of ARP requests. The tester notices that one host is sending ARP replies for IP addresses that are not its own. What does this indicate?

   • AThe host is performing a port scan
   • BThe host has a misconfigured subnet mask
   • CThe host is likely performing ARP spoofing to intercept traffic
   • DThe host is running a DHCP server
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   A penetration tester is building a profile of a target organization by collecting information from public job postings, press releases, and social media. What is the primary goal of this data collection?

   • ATo identify potential attack vectors and social engineering opportunities
   • BTo bypass network firewalls
   • CTo obtain valid credentials for the target's systems
   • DTo directly exploit vulnerabilities in the target's systems
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   During traffic analysis, a penetration tester observes a large number of ARP requests from a single host to all other hosts on the network. What might this indicate?

   • ANormal network behavior with no security implications
   • BA DDoS attack on the DNS server
   • CEncrypted traffic that cannot be analyzed
   • DARP spoofing or a misconfigured host
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which of the following is an example of collecting data from OSINT to build a target profile?

   • ADeploying a keylogger on the target's system
   • BUsing a brute-force tool to guess passwords on the target's VPN
   • CPerforming a SQL injection attack on the target's database
   • DReviewing the target's annual report and SEC filings
   Reveal Solution Discussion Select an answer first