Information Gathering Basic- 5-6,6-7

What is information gathering in cybersecurity?

• Collecting data from online sources

• Analyzing network traffic

• Identifying vulnerabilities in a system

• Identifying vulnerabilities in a system

Which of the following is NOT a passive information gathering technique?

• Dumpster diving

• Social Engineering

• Google Dorking

• Port scanning

What is dumpster diving?

• a) Scanning open ports on a network

• b) Searching through physical trash for sensitive information

• c) Sending deceptive emails to gather information

• d) Using social media to collect data

What does OSINT stand for in information gathering?

• a) Operating System Interface

• b) Open Source Intelligence

• c) Online Security Investigation

• d) Operating System Integration

Which of the following is an example of active information gathering?

• a) Reading publicly available documents

• b) Sending phishing emails

• c) Monitoring network traffic

• d) Analyzing social media profiles

What is social engineering in the context of information gathering?

• a) Exploiting vulnerabilities in social media platforms

• b) Gathering information through physical interaction or deception

• c) Using advanced algorithms to extract data from websites

• d) Analyzing social media trends

Which of the following is a legal and ethical way to gather information online?

• a) Phishing

• b) Social engineering

• c) OSINT

• d) Port scanning

What is the primary goal of information gathering in cybersecurity?

• a) To gain unauthorized access to systems

• b) To identify weaknesses and vulnerabilities

• c) To encrypt sensitive data

• d) To monitor network traffic

Which of the following is NOT a type of information typically gathered during reconnaissance?

• a) IP addresses

• b) Employee passwords

• c) Software versions

• d) Network topology

What is the difference between active and passive information gathering techniques?

• a) Active techniques require user interaction, while passive techniques do not

• b) Active techniques involve scanning for vulnerabilities, while passive techniques involve observing and gathering data

• c) Active techniques are legal, while passive techniques are illegal

• d) Active techniques are faster than passive techniques