Reconnaissance, Footprinting, and OSINT Techniques EHE Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which of the following is a common open-source intelligence (OSINT) source?

   • ASocial media platforms
   • BInternal corporate emails
   • CEncrypted private databases
   • DPassword-protected cloud storage
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which method is used to obtain registration details of a domain name?

   • ADNS zone transfer
   • BPort scan
   • CWHOIS lookup
   • DPing sweep
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A penetration tester is conducting OSINT analysis on a target organization. The tester has found that the organization uses a specific web application firewall (WAF) and has a public API endpoint. The tester also discovered that the organization's developers frequently post code snippets on public forums that include internal IP addresses. Which conclusion is most justified by this OSINT?

   • AThe internal IP addresses are useless because they are not routable from the internet.
   • BThe WAF can be bypassed using known evasion techniques, and the internal IPs may be used to access internal systems directly.
   • CThe organization is definitely vulnerable to SQL injection on the public API.
   • DThe OSINT is sufficient to launch a direct attack on the internal network without further reconnaissance.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   How can OSINT findings be used to build a profile of a target organization?

   • ABy exploiting vulnerabilities found in public code repositories
   • BBy sending phishing emails to employees
   • CBy directly scanning the target's internal network
   • DBy combining information from multiple public sources to create a detailed picture
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is a potential attack vector that can be identified through OSINT analysis?

   • AThe target's encryption keys
   • BAn employee's personal email address used for work accounts
   • CThe target's internal firewall configuration
   • DThe target's database passwords
   Reveal Solution Discussion Select an answer first