Which of the following is a common method to discover hidden files or directories on a target website?

Using a web crawler like Googlebot

Using a directory brute-forcing tool like DirBuster

Using a DNS lookup tool like nslookup

Your company is in a highly competitive industry. You need to gather intelligence about a competitor's new product launch. You have a limited budget and cannot use paid intelligence services. Which combination of free OSINT sources would provide the most useful insights?

Query the competitor's DNS records for new subdomains that might indicate product names.

Perform a ping sweep on the competitor's public IP range to identify internal servers.

Analyze the competitor's job postings, patent filings, and technical blog posts.

Use WHOIS to find the competitor's domain registration date and infer product launch timing.

EC-CouncilCertified Ethical Hacker

Domain 2Objective 1

Footprinting and OSINT CEH Practice Questions (Page 8)

Part of the Reconnaissance Techniques domain, which makes up ~14% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~13–22 in this domain), expect 2–3 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

9concepts

Questions 36–40

36foundation · easy
Which technique is commonly used to discover active hosts on a network by sending ICMP echo requests?
Select an answer first
37foundation · easy
Which of the following is a common method to discover hidden files or directories on a target website?
Select an answer first
38application · easy
You are mapping the network path from your location to a target server. You want to identify intermediate routers and the network path taken. Which tool would you use?
Select an answer first
39expert · hard
Your company is in a highly competitive industry. You need to gather intelligence about a competitor's new product launch. You have a limited budget and cannot use paid intelligence services. Which combination of free OSINT sources would provide the most useful insights?
Select an answer first
40foundation · easy
Which DNS record type is used to map a domain name to an IPv6 address?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Footprinting and OSINT CEH Practice Questions (Page 8)

Questions 36–40

Which technique is commonly used to discover active hosts on a network by sending ICMP echo requests?

Which of the following is a common method to discover hidden files or directories on a target website?

You are mapping the network path from your location to a target server. You want to identify intermediate routers and the network path taken. Which tool would you use?

Your company is in a highly competitive industry. You need to gather intelligence about a competitor's new product launch. You have a limited budget and cannot use paid intelligence services. Which combination of free OSINT sources would provide the most useful insights?

Which DNS record type is used to map a domain name to an IPv6 address?

Keep studying — Reconnaissance Techniques