Active Reconnaissance & Scanning Techniques Quiz

1. Which Nmap option allows you to specify a custom port range for scanning?

-p

-sV

-O

-n

2. Port 3306 is typically associated with which database service?

PostgreSQL

MySQL

Oracle

MSSQL

3. True or False: Active Reconnaissance requires explicit written authorization from the target organization.

True

False

4. Which Nmap scripting engine script category is most useful for vulnerability detection during enumeration?

Vuln

Auth

Default

Intrusive

Submit

6. Which port state in Nmap indicates a firewall is actively rejecting connections?

Open

Closed

Filtered

Unfiltered

Submit

8. What is the primary risk of Active Reconnaissance (PenTest+) operations?

Detection by network security systems

Consuming too much bandwidth

Requiring expensive tools

Needing multiple testers

9. Which HTTP response code indicates a resource exists but requires authentication?

200

301

401

404

Submit

11. Which TCP port scanning technique sends SYN packets and waits for SYN-ACK responses without completing the three-way handshake?

Full connect scan

Half-open scan

FIN scan

UDP scan

Submit

13. What is the standard port number for SSH (Secure Shell) service?

20

21

22

23

14. Which tool is commonly used for DNS enumeration and zone transfer attempts?

Wireshark

Dig

Hashcat

Burp Suite

Submit

16. Which scanning technique sends packets with no TCP flags set to determine firewall filtering rules?

SYN scan

NULL scan

RST scan

ACK scan

17. What does OSINT stand for in the context of reconnaissance?

Open Source Intelligence

Operational Security Intelligence

Online System Information Network

Open Socket Interface Network Technology

Submit

19. Which Nmap parameter is used to enable aggressive scanning with OS detection, version detection, and script scanning?

-sA

-A

-p-

-sU

20. What is the primary purpose of service enumeration during Active Reconnaissance (PenTest+)?

Identify running services and their versions

Crack user passwords

Modify firewall rules

Delete log files

Active Recon Quiz: Can You Master Scanning & Enumeration?

1. Which Nmap option allows you to specify a custom port range for scanning?

2.

What first name or nickname would you like us to use?

2. Port 3306 is typically associated with which database service?

3. True or False: Active Reconnaissance requires explicit written authorization from the target organization.

4. Which Nmap scripting engine script category is most useful for vulnerability detection during enumeration?

5. WHOIS queries during Active Reconnaissance help identify ______ and administrative contact information.

6. Which port state in Nmap indicates a firewall is actively rejecting connections?

7. Traceroute and MTR tools are used during Active Reconnaissance to map network ______ and identify intermediate hops.

8. What is the primary risk of Active Reconnaissance (PenTest+) operations?

9. Which HTTP response code indicates a resource exists but requires authentication?

10. Active Reconnaissance differs from passive reconnaissance in that it directly ______ the target network.

11. Which TCP port scanning technique sends SYN packets and waits for SYN-ACK responses without completing the three-way handshake?

12. UDP scanning with Nmap is slower than TCP scanning because UDP is a ______ protocol.

13. What is the standard port number for SSH (Secure Shell) service?

14. Which tool is commonly used for DNS enumeration and zone transfer attempts?

15. In Active Reconnaissance, banner grabbing is used to identify ______ and patch levels of services.

16. Which scanning technique sends packets with no TCP flags set to determine firewall filtering rules?

17. What does OSINT stand for in the context of reconnaissance?

18. Nmap's default scan type uses a ______ to identify open, closed, and filtered ports.

19. Which Nmap parameter is used to enable aggressive scanning with OS detection, version detection, and script scanning?

20. What is the primary purpose of service enumeration during Active Reconnaissance (PenTest+)?