Footprinting and OSINT CEH Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   Your organization wants to reduce the amount of information available to attackers via search engines. Which countermeasure would be most effective?

   • AImplement DNSSEC to prevent DNS spoofing.
   • BUse a WHOIS privacy service to hide domain registration details.
   • CDisable ping sweeps on the firewall to prevent network discovery.
   • DCreate a robots.txt file that disallows indexing of sensitive directories and remove outdated or sensitive content from the web server.
   Reveal Solution Discussion Select an answer first
2. 17application · easy

   A junior penetration tester is starting a reconnaissance engagement. The tester has been asked to perform footprinting to gather initial information about the target organization. Which activity best exemplifies footprinting?

   • ASending phishing emails to employees to obtain credentials
   • BScanning the target's network for open ports and services
   • CCollecting publicly available information about the target's employees, technologies, and network infrastructure
   • DExploiting a vulnerability in the target's web application to gain access
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   You are planning a social engineering assessment. The target organization has a strong security awareness program, and employees are trained to recognize phishing. You need to gather information that will help you craft a pretext that is less likely to be questioned. Which source of information would be most valuable?

   • AInformation about the organization's internal projects, vendors, and recent news from press releases and industry forums.
   • BThe organization's DNS records.
   • CThe organization's public IP address range.
   • DGeneric employee names and job titles from LinkedIn.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   You are performing website footprinting for a client. The target website uses a custom CMS. You need to identify the exact version of the CMS and any plugins that might be vulnerable. The website is behind a CDN that strips most HTTP headers. Which technique would be most effective?

   • AAnalyze the website's JavaScript and CSS file paths, which often include version numbers or plugin names.
   • BUse a ping sweep to identify the server OS and infer the CMS.
   • CQuery DNS records for a TXT record that lists the CMS version.
   • DPerform a WHOIS lookup to identify the CMS developer.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   Your organization wants to minimize the information available to attackers through WHOIS and DNS footprinting. Which countermeasure would be most effective?

   • ARemove all DNS records to make the domain unreachable.
   • BImplement DNSSEC to prevent DNS spoofing.
   • CUse WHOIS privacy protection and configure DNS to avoid revealing internal hostnames in public records.
   • DDisable ping sweeps on the firewall.
   Reveal Solution Discussion Select an answer first