Reconnaissance, Footprinting, and OSINT Techniques EHE Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A penetration tester is assigned to assess the external attack surface of a client organization. The client has asked the tester to avoid any direct interaction with their systems until the planning phase is complete. The tester needs to build an initial profile of the organization, including key employees, technologies used, and potential entry points. Which approach best satisfies the client's constraint?

   • AQuery the client's DNS servers for zone transfers and enumerate subdomains.
   • BConnect to the client's web server and inspect HTTP response headers for server software versions.
   • CPerform a ping sweep of the client's public IP range to identify live hosts.
   • DSearch public job postings, social media profiles, and the client's website for employee names, technologies, and contact details.
   Reveal Solution Discussion Select an answer first
2. 37expert · hard

   A penetration tester is following a structured footprinting methodology for a client. The tester has completed passive reconnaissance, including WHOIS, DNS, and social media searches. The tester has also organized the data and identified potential attack vectors. The client has now authorized active reconnaissance. According to the methodology, what should the tester do next?

   • AWrite the final report based on the passive findings alone.
   • BImmediately attempt to exploit the identified attack vectors.
   • CPerform active scanning of the identified targets to confirm the passive findings and discover live services.
   • DRepeat passive reconnaissance to ensure no data was missed.
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A penetration tester is following the footprinting methodology. The tester has completed the initial data collection phase and has gathered a large amount of raw data from various OSINT sources. What is the next step in the footprinting process?

   • AOrganize and analyze the collected data to identify patterns and potential attack vectors.
   • BWrite a report of the findings and present it to the client.
   • CBegin active scanning to verify the collected data.
   • DDiscard any data that seems irrelevant to the assessment.
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   In the ethical hacking methodology, what is the primary purpose of the reconnaissance phase?

   • ATo report findings to the organization's management
   • BTo exploit identified vulnerabilities to gain unauthorized access
   • CTo remove traces of an attack to avoid detection
   • DTo gather preliminary information about a target before launching an attack
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A penetration tester is following a structured footprinting methodology for a new client. The tester has completed the initial data collection phase, which included WHOIS, DNS lookups, and social media searches. The tester has also organized the data into a central repository. What is the next logical step in the footprinting process?

   • AWrite the final report and present it to the client.
   • BDelete any data that does not directly relate to network IP addresses.
   • CImmediately begin active scanning of the target's network to confirm the findings.
   • DAnalyze the collected data to identify patterns, relationships, and potential attack vectors.
   Reveal Solution Discussion Select an answer first