Open-Source Intelligence (OSINT) CPENT Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   You are performing OSINT for a client and have downloaded a publicly available PDF brochure from their website. You want to extract hidden information such as the author's username, the software used to create the document, and the original file creation date. Which tool or technique is most appropriate for this task?

   • ARun exiftool on the PDF file
   • BPerform a Google search for the PDF filename
   • CUse strings on the PDF file
   • DOpen the PDF in a text editor
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the primary purpose of an OSINT report in a penetration test?

   • ATo serve as a legal document for law enforcement
   • BTo replace the final penetration testing report
   • CTo provide actionable intelligence that can be used in later phases of the test
   • DTo list all vulnerabilities found during the test
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which phase of the penetration testing methodology typically incorporates OSINT activities?

   • AReporting
   • BInformation gathering
   • CPost-exploitation
   • DExploitation
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   During a penetration test, you are tasked with mapping the external infrastructure of a client's domain. You want to identify the authoritative DNS servers, the registrar, and the IP address of the primary web server. Which command or tool would you use first to gather this information?

   • ARun whois and then dig/nslookup for the domain
   • Bdig example.com ANY
   • Cnslookup example.com
   • Dwhois example.com
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   You have completed the OSINT phase of a penetration test and gathered a large amount of data, including email addresses, subdomains, metadata from public documents, and Google dork results. You need to present these findings to the client in a way that is actionable for the next phase of testing. What is the most appropriate way to structure the OSINT report?

   • AList all raw data in a single appendix without categorization
   • BCreate a visual map of all relationships using Maltego and include it as the only deliverable
   • COrganize findings by source type and include a summary of potential impact and recommended next steps
   • DProvide only the most sensitive findings and omit the rest to avoid overwhelming the client
   Reveal Solution Discussion Select an answer first