Reconnaissance, Footprinting, and OSINT Techniques EHE Practice Questions (Page 9)

Questions 41–42

1. 41application · medium

   A security researcher is conducting passive reconnaissance on a target organization. The researcher has gathered employee names from LinkedIn and the company's technology stack from job postings. The researcher now wants to identify the organization's physical security posture, such as the layout of their office and any security cameras visible from the street. Which OSINT source would be most appropriate?

   • AUse Google Maps or similar mapping services to view street-level imagery of the office location.
   • BSend a phishing email to an employee to ask about the office layout.
   • CQuery the company's DNS records for TXT records that might describe physical security.
   • DPerform a port scan of the office's public IP address to identify security camera systems.
   Reveal Solution Discussion Select an answer first
2. 42expert · hard

   A penetration tester is conducting a red team exercise against a client. The client has strict rules of engagement that prohibit any active scanning or direct interaction with the target's systems during the initial phase. The tester has gathered OSINT data including employee names, email addresses, and the technology stack from job postings and social media. The tester also found a public GitHub repository that appears to belong to the client and contains code snippets referencing internal API endpoints. Which action best applies the OSINT findings to identify potential attack vectors while staying within the rules of engagement?

   • AUse the employee email addresses to send a questionnaire about the internal network.
   • BPerform a port scan on the identified IP range to verify the technology stack.
   • CSend a DNS zone transfer request to the target's DNS server to enumerate internal hosts.
   • DUse the internal API endpoints from the GitHub repository to craft a targeted phishing email that appears to be an internal notification.
   Reveal Solution Discussion Select an answer first