What is a common limitation of Whois data that a penetration tester should consider?

Whois queries are illegal in most countries

Whois records are encrypted and cannot be read by humans

Whois only provides information about IP addresses, not domains

The data may be outdated or inaccurate due to privacy protection or intentional misdirection

A security analyst is investigating a suspicious email that was received by multiple employees. The email appears to come from the company's HR department and contains an attachment. The email headers show the following: Received: from mail.hr.company.com (mail.hr.company.com [203.0.113.20]) by mx.company.com with ESMTP id 98765 Received: from unknown [198.51.100.99] (helo=hr.company.com) The email has a 'Reply-To' address of 'hr@company.com' and the attachment is a PDF named 'Salary_Review.pdf'. The analyst notices that the 'Received' header shows an IP address that is not in the company's known range. What is the most likely conclusion?

The email is a phishing attempt, but the attachment is harmless.

The email is legitimate, but the HR department uses an external email service.

The email is legitimate, but the 'Received' header was added by a third-party relay.

The email is spoofed, and the attachment may contain malware.

What is the primary goal of DNS enumeration in the footprinting phase?

To determine the target's firewall rules

To discover hostnames, IP addresses, and other DNS records associated with the target domain

To identify the operating system of the target's web server

To find the physical location of the target's servers

EC-CouncilCertified Ethical Hacker

Domain 2Objective 2

Whois, DNS and Email Footprinting CEH Practice Questions (Page 1)

Part of the Reconnaissance Techniques domain, which makes up ~14% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~13–22 in this domain), expect 2–3 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

11concepts

Questions 1–5

1foundation · easy
Which Whois field is most useful for identifying the authoritative DNS servers for a domain?
Select an answer first
2foundation · easy
What is a common limitation of Whois data that a penetration tester should consider?
Select an answer first
3expert · hard
A security analyst is investigating a suspicious email that was received by multiple employees. The email appears to come from the company's HR department and contains an attachment. The email headers show the following: Received: from mail.hr.company.com (mail.hr.company.com [203.0.113.20]) by mx.company.com with ESMTP id 98765 Received: from unknown [198.51.100.99] (helo=hr.company.com) The email has a 'Reply-To' address of 'hr@company.com' and the attachment is a PDF named 'Salary_Review.pdf'. The analyst notices that the 'Received' header shows an IP address that is not in the company's known range. What is the most likely conclusion?
Select an answer first
4foundation · easy
What is the primary goal of DNS enumeration in the footprinting phase?
Select an answer first
5foundation · easy
Which DNS record type is used to specify the authoritative name servers for a domain?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Whois, DNS and Email Footprinting CEH Practice Questions (Page 1)

Questions 1–5

Which Whois field is most useful for identifying the authoritative DNS servers for a domain?

What is a common limitation of Whois data that a penetration tester should consider?

What is the primary goal of DNS enumeration in the footprinting phase?

Which DNS record type is used to specify the authoritative name servers for a domain?

Keep studying — Reconnaissance Techniques