Welcome to the Information Gathering MCQs Page

Dive deep into the fascinating world of Information Gathering with our comprehensive set of Multiple-Choice Questions (MCQs). This page is dedicated to exploring the fundamental concepts and intricacies of Information Gathering, a crucial aspect of CompTIA PenTest+ Certification Exam PT0 002. In this section, you will encounter a diverse range of MCQs that cover various aspects of Information Gathering, from the basic principles to advanced topics. Each question is thoughtfully crafted to challenge your knowledge and deepen your understanding of this critical subcategory within CompTIA PenTest+ Certification Exam PT0 002.

Check out the MCQs below to embark on an enriching journey through Information Gathering. Test your knowledge, expand your horizons, and solidify your grasp on this vital area of CompTIA PenTest+ Certification Exam PT0 002.

Note: Each MCQ comes with multiple answer choices. Select the most appropriate option and test your understanding of Information Gathering. You can click on an option to test your knowledge before viewing the solution for a MCQ. Happy learning!

Information Gathering MCQs | Page 1 of 17

Explore more Topics under CompTIA PenTest+ Certification Exam PT0 002

01

Penetration Testing

02

Planning and Scoping Penetration Tests 🔒

03

Vulnerability Scanning 🔒

04

Analyzing Vulnerability Scans

05

Exploiting and Pivoting 🔒

06

Exploiting Network Vulnerabilities 🔒

07

Exploiting Physical and Social Vulnerabilities

08

Exploiting Application Vulnerabilities 🔒

09

Attacking Hosts,Cloud Technologies and Specialized Systems 🔒

10

Reporting and Communication

11

Scripting for Penetration Testing 🔒

Q1.

What is the first step in many penetration tests?

Active intelligence gathering

Passive intelligence gathering

Engaging target systems

Documenting target organization

Discuss

Answer: (b).Passive intelligence gathering Explanation:The first step in many penetration tests is to gather information about the organization via passive intelligence gathering methods.

Q2.

What does OSINT stand for in the context of information gathering for penetration tests?

Open Source Investigation Techniques

Operational System Interaction

Open Source Intelligence

Operational Security and Information Networking Technologies

Discuss

Answer: (c).Open Source Intelligence Explanation:OSINT stands for open source intelligence, which includes data from publicly available sources such as DNS registrars, web searches, security-centric search engines, and various other information sources.

Q3.

What does OSINT help determine in the context of penetration testing?

Organization's policies

Organization's financial status

Organization's footprint

Organization's marketing strategy

Discuss

Answer: (c).Organization's footprint Explanation:OSINT is often used to determine the organization’s footprint: a listing of all the systems, networks, and other technology that an organization has.

Q4.

What is CVE?

A cybersecurity conference

A government agency

Common Vulnerabilities and Exposures

Cybersecurity Verification Engine

Discuss

Answer: (c).Common Vulnerabilities and Exposures Explanation:CVE stands for Common Vulnerabilities and Exposures, and it identifies vulnerabilities by name, number, and description, providing a common scheme for referring to vulnerabilities.

Q5.

Which organization developed the Common Weakness Enumeration (CWE) list?

CIA

FBI

MITRE Corporation

NSA

Discuss

Answer: (c).MITRE Corporation Explanation:The Common Weakness Enumeration (CWE) is a community-developed list developed and maintained by the MITRE Corporation.

Q6.

What does the Common Weakness Enumeration (CWE) list focus on?

Hardware weaknesses

Software weaknesses

Network weaknesses

Physical security weaknesses

Discuss

Answer: (b).Software weaknesses Explanation:The Common Weakness Enumeration (CWE) tackles a broad range of software weaknesses and breaks them down by research concepts, development concepts, and architectural concepts.

Q7.

What may on-site penetration testing involve?

Remote access control testing

Dumpster diving

Social engineering engagements

Network and system analysis

Discuss

Answer: (b).Dumpster diving Explanation:On-site penetration testing may involve activities such as dumpster diving to recover paper records and other information.

Q8.

What type of information can public records provide in the context of physical location information?

Internal practices and procedures

Ownership and tax records

Personnel names and email addresses

Technologies used by the organization

Discuss

Answer: (b).Ownership and tax records Explanation:Public records can provide ownership and tax records, which can be useful in understanding physical locations during penetration testing.

Q9.

What physical security elements might a penetration tester look for when understanding a target's physical locations?

Software used

Email addresses of personnel

Locations of cameras, entrances, and exits

Internal practices and procedures

Discuss

Answer: (c).Locations of cameras, entrances, and exits Explanation:When understanding physical locations, a penetration tester might look for physical security elements like locations of cameras, entrances, exits, guards, fences, and other controls.

Q10.

How can electronic documents assist in understanding an organization's structure?

By providing information on technologies used

By detailing internal practices and procedures

By offering names and email addresses of personnel

All of the above

Discuss

Answer: (d).All of the above Explanation:Electronic documents can provide information on technologies used, internal practices and procedures, as well as names and email addresses of personnel.

Page 1 of 17

Planning and Scoping Penetration Tests 🔒

Vulnerability Scanning 🔒

Exploiting and Pivoting 🔒

Exploiting Network Vulnerabilities 🔒

Exploiting Application Vulnerabilities 🔒

Attacking Hosts,Cloud Technologies and Specialized Systems 🔒

Scripting for Penetration Testing 🔒

Welcome to the Information Gathering MCQs Page

Information Gathering MCQs | Page 1 of 17

Explore more Topics under CompTIA PenTest+ Certification Exam PT0 002

Penetration Testing

Analyzing Vulnerability Scans

Exploiting Physical and Social Vulnerabilities

Reporting and Communication

Suggested Topics

MATLAB

R Programming

Object Oriented Programming

C Programming

Discrete Mathematics

Operating System

MongoDB

MS Office

Data Structures and Algorithms