What is the primary purpose of using the traceroute command during network footprinting?

To map the network path from the attacker to the target host

To identify the operating system of the target host

To determine the target's domain name

To discover open ports on the target host

Which of the following is a primary source of OSINT for gathering information about an organization's employees?

The organization's firewall logs

The organization's internal HR database

Social media platforms like LinkedIn

The organization's intrusion detection system alerts

You are performing network footprinting for a client. The client's network uses a firewall that drops ICMP echo requests. You need to identify active hosts on a known IP range. Which technique would be most effective despite the firewall?

Use a DNS zone transfer to get a list of all hosts.

Use TCP SYN scans on common ports (e.g., 80, 443, 22) to identify hosts that respond.

Use a WHOIS lookup to find the IP addresses of active hosts.

Use a ping sweep with a larger packet size to bypass the firewall.

You are mapping the network of a target organization. You have identified a public IP range owned by the organization. Which technique would best help you discover which specific IP addresses in that range are active and reachable?

Run a traceroute to the first IP in the range and assume all subsequent IPs are active.

Use a WHOIS lookup to find the IP addresses of all network devices.

Query the organization's DNS server for all A records in the domain.

Perform a ping sweep using a tool like fping or nmap -sn across the entire IP range.

EC-CouncilCertified Ethical Hacker

Domain 2Objective 1

Footprinting and OSINT CEH Practice Questions (Page 5)

Part of the Reconnaissance Techniques domain, which makes up ~14% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~13–22 in this domain), expect 2–3 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

9concepts

Questions 21–25

21foundation · easy
Which social engineering technique involves creating a fictional scenario to trick a target into revealing information?
Select an answer first
22foundation · easy
What is the primary purpose of using the traceroute command during network footprinting?
Select an answer first
23foundation · easy
Which of the following is a primary source of OSINT for gathering information about an organization's employees?
Select an answer first
24expert · hard
You are performing network footprinting for a client. The client's network uses a firewall that drops ICMP echo requests. You need to identify active hosts on a known IP range. Which technique would be most effective despite the firewall?
Select an answer first
25application · medium
You are mapping the network of a target organization. You have identified a public IP range owned by the organization. Which technique would best help you discover which specific IP addresses in that range are active and reachable?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.