Passive vs Active Reconnaissance Methods Quiz

Submit

2. True or False: Active reconnaissance can be justified in authorized penetration tests with proper scope documentation.

True

False

3. Which reconnaissance approach is preferred during the initial phases of an authorized penetration test to minimize detection risk?

Aggressive port scanning

Passive reconnaissance

Vulnerability exploitation

Brute-force attacks

Submit

5. Which tool performs passive reconnaissance by aggregating data from multiple public sources?

Wireshark

TheHarvester

Hydra

SQLmap

6. True or False: Passive reconnaissance can include monitoring network traffic without authorization.

True

False

Submit

8. Banner grabbing during active reconnaissance reveals what information?

Operating system and service versions

Employee names only

Physical server location

Network firewall rules

9. Which reconnaissance method involves gathering information from public records and corporate websites?

Active enumeration

Passive information gathering

Network scanning

Vulnerability exploitation

10. True or False: Passive reconnaissance is always legal without prior authorization.

True

False

11. Which reconnaissance method leaves no trace on the target system's logs?

Active reconnaissance

Passive reconnaissance

Direct port scanning

Network vulnerability assessment

12. Which active reconnaissance technique identifies which services are running on open ports?

Service enumeration

Passive DNS mapping

WHOIS lookup

Google dorking

Submit

14. True or False: Passive reconnaissance requires direct network connections to the target.

True

False

15. Which of the following is a risk associated with active reconnaissance?

Detection by security monitoring systems

Lack of detailed information

Inability to identify open ports

Excessive cost

Submit

17. True or False: Active reconnaissance generates network traffic and may trigger IDS alerts.

True

False

18. Which tool is commonly used for passive DNS reconnaissance?

Nmap

Metasploit

Shodan

Burp Suite

Submit

20. WHOIS lookups and DNS queries are examples of which reconnaissance type?

Active reconnaissance

Passive reconnaissance

Physical reconnaissance

Social engineering

PenTest+ Passive vs Active Reconnaissance Methods Quiz

1. Nessus and OpenVAS are tools primarily used for ____ reconnaissance and vulnerability assessment.

2.

What first name or nickname would you like us to use?

2. True or False: Active reconnaissance can be justified in authorized penetration tests with proper scope documentation.

3. Which reconnaissance approach is preferred during the initial phases of an authorized penetration test to minimize detection risk?

4. Enumeration differs from reconnaissance in that it ____ directly interacts with identified systems.

5. Which tool performs passive reconnaissance by aggregating data from multiple public sources?

6. True or False: Passive reconnaissance can include monitoring network traffic without authorization.

7. Traceroute and ping sweeps are examples of ____ reconnaissance techniques.

8. Banner grabbing during active reconnaissance reveals what information?

9. Which reconnaissance method involves gathering information from public records and corporate websites?

10. True or False: Passive reconnaissance is always legal without prior authorization.

11. Which reconnaissance method leaves no trace on the target system's logs?

12. Which active reconnaissance technique identifies which services are running on open ports?

13. Social media profiling and job postings analysis are forms of ____ reconnaissance.

14. True or False: Passive reconnaissance requires direct network connections to the target.

15. Which of the following is a risk associated with active reconnaissance?

16. Analyzing cached web pages and search engine results is an example of ____ reconnaissance.

17. True or False: Active reconnaissance generates network traffic and may trigger IDS alerts.

18. Which tool is commonly used for passive DNS reconnaissance?

19. Port scanning with tools like Nmap is classified as ____ reconnaissance.

20. WHOIS lookups and DNS queries are examples of which reconnaissance type?