How can an embedded image in an email be used for tracking?

The image contains a hidden script that executes on the recipient's computer

The image changes the sender's email address

The image modifies the email headers to include the recipient's location

The image is loaded from a remote server, which logs the recipient's IP address and time of access

You are performing DNS enumeration for a client. The client's name server is configured to allow zone transfers only from specific IP addresses. You do not have an authorized IP. Which technique would be most effective to enumerate subdomains without triggering a zone transfer?

Perform a reverse DNS lookup on the entire IP range

Brute-force subdomain names using a wordlist and querying the DNS server for each

Attempt a zone transfer using a different DNS server IP

Use a public DNS service to query for ANY records

A security analyst is investigating a phishing campaign that originated from a specific IP address (203.0.113.45). The analyst wants to identify the domain name associated with this IP address to gather more information about the attacker's infrastructure. Which technique should the analyst use?

Query the Whois record for the IP address.

Perform a reverse DNS lookup on the IP address.

Use a search engine to search for the IP address.

Perform a forward DNS lookup on the IP address.

You receive a suspicious email and want to trace its origin. You examine the full email headers and notice that the 'Received' fields show a path through multiple mail servers, but the 'From' address appears to be from a domain that does not match the final 'Received' server's domain. What does this inconsistency most likely indicate?

The email was encrypted in transit.

The email was spoofed or sent through an open relay.

The email was sent from a mobile device.

The email was sent from a webmail service.

EC-CouncilCertified Ethical Hacker

Domain 2Objective 2

Whois, DNS and Email Footprinting CEH Practice Questions (Page 4)

Part of the Reconnaissance Techniques domain, which makes up ~14% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~13–22 in this domain), expect 2–3 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

11concepts

Questions 16–20

16foundation · easy
How can an embedded image in an email be used for tracking?
Select an answer first
17application · medium
A penetration tester is performing reconnaissance on a target organization. The tester wants to find the administrative contact for the target's domain to use in a social engineering attack. Which tool or service should the tester use?
Select an answer first
18expert · hard
You are performing DNS enumeration for a client. The client's name server is configured to allow zone transfers only from specific IP addresses. You do not have an authorized IP. Which technique would be most effective to enumerate subdomains without triggering a zone transfer?
Select an answer first
19application · medium
A security analyst is investigating a phishing campaign that originated from a specific IP address (203.0.113.45). The analyst wants to identify the domain name associated with this IP address to gather more information about the attacker's infrastructure. Which technique should the analyst use?
Select an answer first
20application · medium
You receive a suspicious email and want to trace its origin. You examine the full email headers and notice that the 'Received' fields show a path through multiple mail servers, but the 'From' address appears to be from a domain that does not match the final 'Received' server's domain. What does this inconsistency most likely indicate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Whois, DNS and Email Footprinting CEH Practice Questions (Page 4)

Questions 16–20

How can an embedded image in an email be used for tracking?

A penetration tester is performing reconnaissance on a target organization. The tester wants to find the administrative contact for the target's domain to use in a social engineering attack. Which tool or service should the tester use?

You are performing DNS enumeration for a client. The client's name server is configured to allow zone transfers only from specific IP addresses. You do not have an authorized IP. Which technique would be most effective to enumerate subdomains without triggering a zone transfer?

A security analyst is investigating a phishing campaign that originated from a specific IP address (203.0.113.45). The analyst wants to identify the domain name associated with this IP address to gather more information about the attacker's infrastructure. Which technique should the analyst use?

Keep studying — Reconnaissance Techniques