Which of the following is a common method for harvesting email addresses from public sources?

Using netstat to scan for email traffic

Using search engines to find email addresses listed on websites and forums

Querying the target's DNS server for MX records

Performing a zone transfer to obtain email addresses

How does WHOIS privacy protection affect the information available in a Whois record?

It prevents the domain from being queried via Whois

It makes the domain's creation date unavailable

It removes the domain's name server records

It replaces the registrant's personal details with the privacy service's information

Why is it important to combine Whois, DNS, and email footprinting data when profiling a target?

It reduces the number of tools needed for the engagement

Each source reveals different aspects of the target's infrastructure, and combining them provides a more complete picture

It is required by law before conducting any penetration test

It ensures that the target's firewall will not block the attack

You are investigating a phishing email. The headers show a 'Received' chain with three servers: server1.isp.net, server2.mailcloud.com, and mail.targetcompany.com. The 'From' address is 'admin@targetcompany.com'. Which server is most likely the actual origin of the email?

The origin cannot be determined from the headers.

EC-CouncilCertified Ethical Hacker

Domain 2Objective 2

Whois, DNS and Email Footprinting CEH Practice Questions (Page 5)

Part of the Reconnaissance Techniques domain, which makes up ~14% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~13–22 in this domain), expect 2–3 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

11concepts

Questions 21–25

21foundation · easy
Which of the following is a common method for harvesting email addresses from public sources?
Select an answer first
22foundation · easy
How does WHOIS privacy protection affect the information available in a Whois record?
Select an answer first
23foundation · easy
Which command-line tool is specifically designed for DNS enumeration and can perform zone transfers?
Select an answer first
24foundation · easy
Why is it important to combine Whois, DNS, and email footprinting data when profiling a target?
Select an answer first
25application · medium
You are investigating a phishing email. The headers show a 'Received' chain with three servers: server1.isp.net, server2.mailcloud.com, and mail.targetcompany.com. The 'From' address is 'admin@targetcompany.com'. Which server is most likely the actual origin of the email?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.