Ethical Hacking Phases (reconnaissance to Exploitation) ECSS Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   What is the primary goal of footprinting in the ethical hacking process?

   • ATo create a detailed map of the target's network and system architecture
   • BTo bypass the target's firewall and intrusion detection systems
   • CTo identify the exact version of every software running on the target
   • DTo actively exploit vulnerabilities found in the target's systems
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What distinguishes active reconnaissance from passive reconnaissance?

   • AActive reconnaissance involves direct interaction with the target, while passive reconnaissance does not.
   • BActive reconnaissance only uses automated tools, while passive reconnaissance relies on manual techniques.
   • CActive reconnaissance gathers more detailed information than passive reconnaissance.
   • DActive reconnaissance is always illegal, while passive reconnaissance is always legal.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Which of the following is a typical outcome of the scanning phase?

   • AA list of employee names and email addresses
   • BA list of open ports and the services associated with them
   • CA list of known vulnerabilities and their exploit codes
   • DA list of user accounts and their privileges
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What is the primary purpose of enumeration in the ethical hacking process?

   • ATo extract valid user accounts and other system details that can be used in attacks
   • BTo determine which vulnerabilities exist on the target systems
   • CTo identify the target's network topology and IP address ranges
   • DTo gain unauthorized access to the target system
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Which activity is commonly performed during vulnerability analysis?

   • AExploiting a known vulnerability to gain access
   • BEnumerating user accounts and shared resources
   • CRunning a vulnerability scanner to identify missing patches and misconfigurations
   • DUsing a port scanner to identify open ports on the target
   Reveal Solution Discussion Select an answer first