You are performing passive reconnaissance on a target organization. Which of the following activities is considered passive?

Connecting to the target's SMTP server to enumerate users

Searching public DNS records and job postings

Running an Nmap SYN scan against the target's IP range

Using a web crawler to enumerate the target's website directories

What is the goal of enumeration in a network security assessment?

To exploit known vulnerabilities in the target system

To extract detailed information such as user accounts, shares, and network resources

To passively observe network traffic without interacting with systems

To identify the operating system of the target using banner grabbing

What is the main purpose of the reporting phase in a network security assessment?

To document findings, evidence, and recommended remediation actions for stakeholders

To scan the network for new vulnerabilities

To obtain legal authorization for the assessment

To exploit all discovered vulnerabilities to prove they are real

EC-CouncilCertified Cybersecurity Technician

Domain 3Objective 1

Network Security Assessment Techniques and Tools CCT Practice Questions (Page 3)

Part of the Security Assessment and Application Security domain, which makes up ~9% of our current practice bank.

49questions here

10free pages

12concepts

Questions 11–15

11application · medium
You are performing passive reconnaissance on a target organization. Which of the following activities is considered passive?
Select an answer first
12foundation · easy
What is the goal of enumeration in a network security assessment?
Select an answer first
13foundation · easy
What is the main purpose of the reporting phase in a network security assessment?
Select an answer first
14application · medium
A small business wants to identify known vulnerabilities in its network without performing any exploitation. They need a tool that can scan their systems and produce a prioritized list of vulnerabilities with remediation guidance. Which tool should they use?
Select an answer first
15application · medium
A company wants to perform a non-intrusive assessment of its network to identify known vulnerabilities and generate a prioritized report. Which tool should they use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCT” is a trademark of its owner, used for identification only.

Network Security Assessment Techniques and Tools CCT Practice Questions (Page 3)

Questions 11–15

You are performing passive reconnaissance on a target organization. Which of the following activities is considered passive?

What is the goal of enumeration in a network security assessment?

What is the main purpose of the reporting phase in a network security assessment?

A small business wants to identify known vulnerabilities in its network without performing any exploitation. They need a tool that can scan their systems and produce a prioritized list of vulnerabilities with remediation guidance. Which tool should they use?

A company wants to perform a non-intrusive assessment of its network to identify known vulnerabilities and generate a prioritized report. Which tool should they use?

Keep studying — Security Assessment and Application Security