Which of the following is a challenge of working with OSINT data?

Responses?

What is the following Google search designed to do?

wireless site:somecompany.net

When interrogating a DNS server to discover information about the target domain, what tool can be used in controlling the output of DNS queries with more granularity?

DeepBlueCLI is an open-source framework that automatically parses Windows event logs. What log does DeepBlueCLI parse when you run it with no arguments?

.\DeepBlue.ps1

When performing reconnaissance, what data is collected before sending any packets to the target?

Which tool can detect attacks by analyzing offline Windows event log files?

What header field in IPv6 is similar to the TTL field in an IPv4 header?

Which tool uses a list of hostnames or IP addresses to collect X.509 certificates and cipher details, saving the output in a JSON-formatted file?

End users often configure SMB services to copy files or to share printers on their workstations. What TCP port number does the SMB protocol use?

What are the components of a TCP three-way handshake, listed in the correct sequence?

What tool is designed to work with and parse JSON data?

Nmap sweeps through each target address before launching a port scan. When running without root privileges on a Linux machine, what type of TCP packet does it send to port 80?

An attacker downloads a PDF from a target's website and wants to exploit a vulnerability in the PDF. What tool can the attacker use to view information about the tool that was used to create the PDF?

Which of the following is a characteristic of UDP?

What gives an attacker all records associated with a DNS domain?

From where are OSINT data generally collected?

What tool can be used to efficiently scan large IP ranges, such as cloud service provider IP ranges?

DeepBlueCLI searches which of the following to find unusual behavior or characteristics?

Techniques describe the means by which adversaries achieve tactical goals. What is the format of a MITRE ATT&CK technique ID?

Which of the following is a challenge presented to an attacker when scanning cloud targets as opposed to non-cloud targets?

Which step do non-discriminating attackers skip?

While reviewing logs from a web server, a web administrator notices that every page on a company's site was accessed within a span of six minutes. What is this indicative of?

Which of the following tools can be utilized in a Linux system to search for the username associated with a specific SID?

The adversary tactics, techniques, and procedures from the MITRE ATT&CK Framework are based on which of the following?

During reconnaissance, what internet-based tool helps an attacker procure a list of cloud providers used for a given website?

Which Nmap command will disable port scanning and focus solely on host discovery?

Which of the following is an SMB enumeration tool that identifies SMB servers and shares, then enumerates files using a specified username and password? This tool also reports if a particular file can be read, written to, or deleted by the same credentials with which it ran.

Microsoft SMB version 3.1.1 is aimed at speed, flexibility, and extreme security. It also added support for advanced encryption and pre-authentication integrity to prevent Machine-in-the-Middle (MitM) attacks. What is the minimum server version that supports Microsoft SMB version 3.1.1?