WorksheetsInformation Gathering Techniques Quiz
Total questions: 21
Worksheet time: 11mins
What type of information is considered as personally identifiable information (PII) when gathered about employees during the reconnaissance phase?
Geographical information, entry control systems, and vendor traffic
Intellectual property, critical business functions, and management hierarchy
Names, phone numbers, email addresses, fax numbers, and addresses
Security policies and network mapping
Which of the following is included in physical security information gathered by malicious actors?
Names, contact information, and account numbers of vendors
Intellectual property, critical business functions, and management hierarchy
Geographical information, entry control systems, employee routines, and vendor traffic
Security policies and network mapping
What is the focus of attackers when gathering information about an organization's information systems?
Employee personal details
Vendor contact information and account numbers
Intellectual property and critical business functions
Operating systems, applications, security policies, and network mapping
Which of the following best describes passive information gathering techniques used by attackers?
Directly interface with the organization's systems and leverage open-source tools
Pose a greater danger to malicious actors because of exposure
Rely on publicly available information sources such as the organization's website, brochures, press releases, etc.
Gather names, contact information, and account numbers of vendors
What is a characteristic of active information gathering techniques?
Pose little risk for the malicious actors
Rely on publicly available information sources
Pose a greater danger to malicious actors because of exposure
Include geographical information and vendor traffic
What is Google Earth primarily used for?
Providing a street view of houses, businesses, roadways, and topologies.
Streaming digital cameras that show video of places, people, and activity.
Providing current and historical satellite imagery of most locations.
Pulling information from social media postings.
What does the Wayback Machine offer?
A web mapping service that provides a street view.
A catalog of old site snapshots that may contain information removed from the internet.
A tool to find relationships between companies, people, email addresses, and other information.
A satellite imagery tool that provides images of locations.
What type of information does the search operator "link:website" provide?
All information about a website.
Lists web pages that contain links to websites.
Displays websites similar to the one listed.
Displays websites in which directory browsing has been enabled.
Which tool can be used to pull information from social media postings that were made using location services?
Google Maps
Webcams
Echosec
Maltego
What is the purpose of Maltego in internet research?
To provide street views of different locations.
To stream videos from digital cameras online.
To pull information from social media postings and find relationships between entities.
To provide historical satellite imagery.
What is the purpose of website and email footprinting in network reconnaissance?
To provide details on information flow, operating systems, filenames, and network connections.
To create a network map without entering the physical location of the network.
To find hosts and other objects on a network using DNS network addressing.
To administer IP addresses and ASNs in support of the operation and growth of the internet.
What can be created using a mailing address in the context of network footprinting?
satellite imagery: Google Earth
mapping that provides a street view of houses, businesses, roadways, and topologies: Google Earth
gather the names, contact information, and account numbers of vendors.
Which tool is described as a web-based utility used to gather information about a target network, including things like ownership, IP addresses, domain name location, server type, and the date the site was created?
nslookup
American Registry for Internet Numbers (ARIN)
Whois lookup
Network mapping software
What information can you obtain by using the nslookup tool?
IP addresses & ASNs
information about the host network
IP addresses, domain name, location, server type
a network map without entering the physical location of the network.
What is the role of the American Registry for Internet Numbers (ARIN)?
A web-based utility used to gather information about a target network.
Lists web pages that contain links to websites.
a nonprofit, member-based organization that administers IP addresses & ASNs in support of the operation and growth of the internet.
What is the purpose of the nmap utility?
To create a secure connection between hosts
For network discovery and security auditing
To increase the speed of the network
To manage user permissions on a network
What does the '-sS' flag in the nmap command do?
Scans the entire range of ports starting with port 1
Scans only the top 50 ports on the host
Initiates a TCP SYN scan that scans thousands of ports per second
Specifies the ports to scan with a list
What is the default flag for the nmap command?
-p
-sS
--top-ports
-p-200
How do you scan only port 22 using the nmap command?
nmap -p 22 hostname/IP address
nmap -p-22 hostname/IP address
nmap --top-ports 22 hostname/IP address
nmap -sS 22 hostname/IP address
Which nmap command option scans the top ports used based on Fyodor's latest internet research on open ports?
nmap -sS
nmap -p
nmap --top-ports
nmap -p-200
What does the command 'nmap --top-ports 50 172.26.125.24' do?
Scans all ports on host 172.26.125.24
Scans the entire range of ports starting with port 1 on host 172.26.125.24
Scans only port 50 on host 172.26.125.24
Scans only the top 50 ports on host 172.26.125.24
