Ethical Hacking Phases (reconnaissance to Exploitation) ECSS Practice Questions (Page 9)

Questions 41–45

1. 41foundation · easy

   Which type of information is typically gathered during the footprinting phase?

   • AUser account names and group memberships
   • BOpen ports and running services on the target
   • CIP address ranges, domain names, and employee contact details
   • DSpecific software vulnerabilities and their CVSS scores
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   During a penetration test, you have identified that a Linux server is running an outdated version of vsftpd that is vulnerable to a known backdoor exploit. Your goal is to gain initial access to the server. Which phase of ethical hacking are you about to perform?

   • AEnumeration, by extracting user accounts from the FTP service
   • BScanning, by running a service version scan on the FTP port
   • CExploitation, by running the exploit module to gain a shell
   • DVulnerability analysis, by searching for CVEs related to vsftpd
   Reveal Solution Discussion Select an answer first
4. 43application · medium

   After enumerating a web server, a penetration tester has a list of open ports and services. The tester now needs to identify which specific vulnerabilities exist in the software versions running on those services before attempting to exploit them. Which activity should the tester perform?

   • APassive reconnaissance to gather more public information
   • BExploitation using a known exploit for the web server
   • CFurther enumeration to extract more user accounts
   • DVulnerability analysis using a scanner like Nessus or OpenVAS
   Reveal Solution Discussion Select an answer first
5. 44application · medium

   A security analyst is performing a scan of a target network and has identified that a host is running an FTP service on port 21. The analyst wants to determine if the FTP service is vulnerable to a known exploit. What should the analyst do next?

   • AExploit the FTP service immediately
   • BEnumerate FTP user accounts
   • CPerform vulnerability analysis on the FTP service
   • DPerform passive reconnaissance on the FTP service
   Reveal Solution Discussion Select an answer first
6. 45application · medium

   A penetration tester has completed scanning and identified that a target server is running an SMB service on port 445. The tester now needs to extract user accounts, share names, and group policies from the service to plan an attack. Which phase of the ethical hacking methodology does this activity belong to?

   • AVulnerability Analysis
   • BFootprinting
   • CScanning
   • DEnumeration
   Reveal Solution Discussion Select an answer first