Reconnaissance GPEN Practice Questions (Page 12)

Questions 56–57

1. 56foundation · easy

   What is a best practice for recording reconnaissance findings?

   • AStore all findings in a structured format, such as a spreadsheet or notes, with timestamps and sources
   • BShare findings publicly to demonstrate the test
   • CDelete findings after each phase to reduce clutter
   • DKeep findings only in memory to avoid leaving traces
   Reveal Solution Discussion Select an answer first
2. 57application · medium

   You are conducting a penetration test and have identified an open port on a target server. You want to quickly identify the software and version running on that port without performing a full scan. Which technique is most appropriate?

   • AUse Netcat to connect to the port and read the banner that the service displays.
   • BQuery the DNS server for a service record (SRV) for the port.
   • CRun a full Nmap scan with all default scripts to identify the service.
   • DUse the 'ping' command to see if the host responds and infer the service from the response time.
   Reveal Solution Discussion Select an answer first