You are tasked with gathering OSINT on a company that has a strong online presence. You want to collect information from a variety of sources, including search engines, social media, and public databases. Which combination of sources is most appropriate for a comprehensive OSINT collection?

Search engines, social media platforms, and public government databases

Only public databases, because they are the most reliable

Only search engines, because they index all other sources

Only social media platforms, because they contain the most current information

What type of information is typically found in public records that can be used for OSINT?

Property ownership and court records

During an external penetration test, you need to identify the IP address of the target's web server. You have the domain name. Which OSINT technique is most direct?

Perform a DNS lookup for the domain's A record

Search the target's website for the IP address

Use WHOIS to find the domain registrar

In the context of penetration testing, what is the primary purpose of open-source intelligence (OSINT)?

To gather information about a target from publicly available sources without interacting with the target

To actively scan the target's network to identify open ports and services

To establish a persistent presence on the target's systems for future access

To exploit vulnerabilities found in the target's web applications

What is the primary purpose of Google dorks in OSINT?

To find sensitive information exposed on websites using advanced search operators

To perform automated vulnerability scans on web servers

To bypass Google's search algorithms and access hidden pages

To create fake social media profiles for social engineering

EC-CouncilCertified Penetration Testing Professional

Domain 2Objective 1

Open-Source Intelligence (OSINT) CPENT Practice Questions (Page 1)

Part of the Information Gathering and Social Engineering domain, which makes up ~9% of our current practice bank.

39questions here

8free pages

10concepts

Questions 1–5

1application · easy
You are tasked with gathering OSINT on a company that has a strong online presence. You want to collect information from a variety of sources, including search engines, social media, and public databases. Which combination of sources is most appropriate for a comprehensive OSINT collection?
Select an answer first
2foundation · easy
What type of information is typically found in public records that can be used for OSINT?
Select an answer first
3application · easy
During an external penetration test, you need to identify the IP address of the target's web server. You have the domain name. Which OSINT technique is most direct?
Select an answer first
4foundation · easy
In the context of penetration testing, what is the primary purpose of open-source intelligence (OSINT)?
Select an answer first
5foundation · easy
What is the primary purpose of Google dorks in OSINT?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CPENT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CPENT” is a trademark of its owner, used for identification only.