Q. Which tool has built-in capabilities intended to reduce the likelihood of detection by slowing down testing, randomizing ports, using multiple scanning systems or IP addresses, and faking source addresses?

View solution

Q. In what situations is the need to avoid detection typically determined in penetration testing?

View solution

Q. What is a common defense against active reconnaissance that relies on network defenses?

View solution

Q. What technology is a defensive measure against active reconnaissance to limit or stop probes and prevent scanning?

View solution

Q. What is critical for a penetration tester to monitor when conducting active reconnaissance activities to avoid detection?

View solution

Q. What is a challenge for organizations in preventing passive information gathering?

View solution

Q. What is one of the DNS protection techniques to prevent misuse of domain information in passive information gathering?

View solution

Q. What is passive reconnaissance, often referred to as open source intelligence (OSINT)?

View solution

Q. What is an example of a technique used in active reconnaissance?

View solution

Q. What is described as an important element of active reconnaissance in information gathering?

View solution

Q. Why is information gathering considered the foundation for each successive phase of a penetration test?

View solution

Q. What is a skill that successful penetration testers must possess in relation to information gathering?

View solution

Q. What is the primary characteristic of passive information gathering (OSINT)?

View solution

Q. What types of information can be gathered as part of an OSINT effort in passive information gathering?

View solution

Q. What does enumeration provide for penetration testers?

View solution

Q. What is the purpose of active reconnaissance in a penetration test?

View solution

Q. What is an important aspect of understanding how to gather information about applications in penetration tests?

View solution

Q. Megan runs the following Nmap scan:
nmap -sU -sT -p 1-65535 example.com

What information will she not receive?

View solution

Q. Tom wants to find metadata about an organization using a search engine. What tool from the following list should he use?

View solution

Q. After running an Nmap scan of a system, Zarmeena discovers that TCP ports 139, 443, and 3389 are open. What operating system is she most likely to discover running on the system?

View solution