Reconnaissance GPEN Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is the primary purpose of using traceroute during reconnaissance?

   • ATo map the network path to a target and identify intermediate devices
   • BTo identify open ports on the target
   • CTo extract service banners from the target
   • DTo determine the operating system of the target
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is banner grabbing?

   • AA method to identify the operating system by analyzing TCP/IP stack behavior
   • BA technique to extract information from service banners displayed when connecting to a service
   • CA method to discover live hosts on a network
   • DA technique to map the network path to a target
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   You are mapping a target network and need to understand the path from your position to the target's web server. The target is known to be behind a load balancer and a firewall. You want to identify intermediate network devices and potential filtering without causing excessive traffic. Which tool and technique is most appropriate?

   • AUse a UDP traceroute to high-numbered ports.
   • BUse traceroute with TCP SYN packets to port 80 on the target.
   • CUse traceroute with ICMP Echo requests to map the path.
   • DUse Nmap's ping sweep to identify live hosts along the path.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which tool is commonly used for banner grabbing?

   • AJohn the Ripper
   • BNetcat
   • CTraceroute
   • DWireshark
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   You are performing reconnaissance for a penetration test and have gathered a large amount of data, including DNS records, open ports, service banners, and OS fingerprints. You need to ensure that this information is organized and accessible for later phases of the test. Which practice is most effective?

   • AStore all findings in a single text file with timestamps and source IPs.
   • BUse a structured documentation tool like a spreadsheet or a penetration testing framework (e.g., Dradis) to record findings per host and service.
   • CShare the raw output of tools directly with the client without analysis.
   • DKeep the information only in your memory to avoid leaving traces.
   Reveal Solution Discussion Select an answer first