PenTest Plus V3 Reconnaissance Techniques Assessment

Submit

2. Which of the following best describes the relationship between reconnaissance and vulnerability assessment?

They are the same process

Reconnaissance informs the targets for vulnerability assessment

Vulnerability assessment occurs before reconnaissance

They are unrelated phases

Submit

4. Which tool can be used to trace the route packets take to reach a destination host?

Nmap

Traceroute or tracert

Wireshark

Netstat

5. True or False: Reverse DNS lookups can help identify hostnames associated with IP addresses.

True

False

6. Which reconnaissance method involves analyzing publicly available documents like job postings and technical papers?

Network scanning

Port enumeration

Document analysis and OSINT

Packet sniffing

Submit

8. What information can be obtained from reviewing a target's SSL/TLS certificates?

User passwords

Domain names and alternative names

Source code

Database credentials

9. True or False: Reconnaissance is considered part of the attack chain and must be performed legally within scope.

True

False

10. Which of the following can be gathered through social engineering during reconnaissance?

Firewall rule configurations

Employee names and contact information

Encrypted database contents

Private encryption keys

11. Which reconnaissance phase involves gathering information without directly interacting with the target system?

Passive reconnaissance

Active reconnaissance

Direct enumeration

Network scanning

12. Which tool is used to identify live hosts on a network segment?

Shodan

Ping or ARP sweep

Whois

Traceroute

13. True or False: Active reconnaissance is less likely to trigger security alerts than passive reconnaissance.

True

False

14. Which reconnaissance technique uses DNS queries to map network topology without sending direct traffic?

Port scanning

DNS zone transfer

Ping sweeps

ARP enumeration

Submit

16. What does nmap primarily identify during network reconnaissance?

Domain registration details

Open ports and running services

Employee social media accounts

Email server configurations

17. Which of the following is an example of open-source intelligence (OSINT)?

Port scanning with Nmap

Searching public social media profiles

Capturing network packets

Exploiting a vulnerability

Submit

19. Which tool is commonly used for passive WHOIS lookups and domain registration information?

Nmap

Wireshark

WHOIS

Metasploit

20. What is the primary purpose of DNS enumeration during reconnaissance?

To identify mail servers

To discover subdomains and IP addresses

To exploit DNS vulnerabilities

To block DNS queries

PenTest Plus V3 Reconnaissance Techniques Quiz

1. Shodan is a search engine that indexes information about ____.

2.

What first name or nickname would you like us to use?

2. Which of the following best describes the relationship between reconnaissance and vulnerability assessment?

3. Information gathered from public records, news articles, and company websites is part of ____.

4. Which tool can be used to trace the route packets take to reach a destination host?

5. True or False: Reverse DNS lookups can help identify hostnames associated with IP addresses.

6. Which reconnaissance method involves analyzing publicly available documents like job postings and technical papers?

7. The process of identifying systems and services on a network is called ____.

8. What information can be obtained from reviewing a target's SSL/TLS certificates?

9. True or False: Reconnaissance is considered part of the attack chain and must be performed legally within scope.

10. Which of the following can be gathered through social engineering during reconnaissance?

11. Which reconnaissance phase involves gathering information without directly interacting with the target system?

12. Which tool is used to identify live hosts on a network segment?

13. True or False: Active reconnaissance is less likely to trigger security alerts than passive reconnaissance.

14. Which reconnaissance technique uses DNS queries to map network topology without sending direct traffic?

15. Footprinting is the process of gathering information about a target's ____.

16. What does nmap primarily identify during network reconnaissance?

17. Which of the following is an example of open-source intelligence (OSINT)?

18. Active reconnaissance differs from passive reconnaissance in that it ____.

19. Which tool is commonly used for passive WHOIS lookups and domain registration information?

20. What is the primary purpose of DNS enumeration during reconnaissance?