Welcome to the Information Gathering MCQs Page

Dive deep into the fascinating world of Information Gathering with our comprehensive set of Multiple-Choice Questions (MCQs). This page is dedicated to exploring the fundamental concepts and intricacies of Information Gathering, a crucial aspect of CompTIA PenTest+ Certification Exam PT0 002. In this section, you will encounter a diverse range of MCQs that cover various aspects of Information Gathering, from the basic principles to advanced topics. Each question is thoughtfully crafted to challenge your knowledge and deepen your understanding of this critical subcategory within CompTIA PenTest+ Certification Exam PT0 002.

Check out the MCQs below to embark on an enriching journey through Information Gathering. Test your knowledge, expand your horizons, and solidify your grasp on this vital area of CompTIA PenTest+ Certification Exam PT0 002.

Note: Each MCQ comes with multiple answer choices. Select the most appropriate option and test your understanding of Information Gathering. You can click on an option to test your knowledge before viewing the solution for a MCQ. Happy learning!

Information Gathering MCQs | Page 10 of 17

Explore more Topics under CompTIA PenTest+ Certification Exam PT0 002

01

Penetration Testing

02

Planning and Scoping Penetration Tests 🔒

03

Vulnerability Scanning 🔒

04

Analyzing Vulnerability Scans

05

Exploiting and Pivoting 🔒

06

Exploiting Network Vulnerabilities 🔒

07

Exploiting Physical and Social Vulnerabilities

08

Exploiting Application Vulnerabilities 🔒

09

Attacking Hosts,Cloud Technologies and Specialized Systems 🔒

10

Reporting and Communication

11

Scripting for Penetration Testing 🔒

Q91.

What is the purpose of analyzing ARP traffic in penetration testing?

To identify vulnerabilities in web applications

To detect firewalls

To determine which host has what IP address

To perform network scanning

Discuss

Answer: (c).To determine which host has what IP address Explanation:Analyzing ARP traffic in penetration testing is done to determine which host has what IP address.

Q92.

Which tool allows the creation of complex actions like custom-crafting TCP or other packets for testing vulnerabilities or exploits?

Wireshark

Hping

Scapy

Netcat

Discuss

Answer: (c).Scapy Explanation:Scapy allows the creation of complex actions like custom-crafting TCP or other packets for testing vulnerabilities or exploits.

Q93.

What are the most common means of enumerating users through exposed services?

finger and rwho

SMB and SNMP

Email and Metasploit

Harvester and Shodan

Discuss

Answer: (b).SMB and SNMP Explanation:The most common means of enumerating users through exposed services are SMB and SNMP.

Q94.

What is theHarvester used for in penetration testing?

Enumerating users through exposed services

Gathering valid email addresses

Conducting phishing campaigns

Performing directory services enumeration

Discuss

Answer: (b).Gathering valid email addresses Explanation:theHarvester is used for gathering valid email addresses in penetration testing.

Q95.

What functionality does Metasploit include for email harvesting?

Social media enumeration

SMB and SNMP enumeration

Commercial email address lists

/auxiliary/gather/search_email_collector tool

Discuss

Answer: (d)./auxiliary/gather/search_email_collector tool Explanation:Metasploit includes the /auxiliary/gather/search_email_collector tool for email harvesting.

Q96.

Why is email user enumeration considered a very important technique in penetration testing?

To identify vulnerabilities in web applications

To detect firewalls

To gather valid email addresses for phishing campaigns

To perform network scanning

Discuss

Answer: (c).To gather valid email addresses for phishing campaigns Explanation:Email user enumeration is considered a very important technique in penetration testing to gather valid email addresses for phishing campaigns.

Q97.

What is the focus of social media enumeration in penetration testing?

Identifying vulnerabilities in web applications

Detecting firewalls

Enumerating users through exposed services

Identifying all social media accounts of an individual or organization

Discuss

Answer: (d).Identifying all social media accounts of an individual or organization Explanation:Social media enumeration in penetration testing focuses on identifying all social media accounts of an individual or organization.

Q98.

What is a common reason for penetration testers to target group management interfaces and tools?

To identify vulnerabilities in web applications

To gather valid email addresses

To gain additional privileges by adding an unprivileged user to a privileged group

To perform network scanning

Discuss

Answer: (c).To gain additional privileges by adding an unprivileged user to a privileged group Explanation:Penetration testers often target group management interfaces and tools to gain additional privileges by adding an unprivileged user to a privileged group.

Q99.

How can SNMP be used for user enumeration?

By directly querying the Active Directory

By using snmpwalk with the appropriate community string

By using theHarvester tool

By conducting an SNMP sweep

Discuss

Answer: (b).By using snmpwalk with the appropriate community string Explanation:SNMP can be used for user enumeration by using snmpwalk with the appropriate community string.

Q100.

What tool can be used to gather Samba users?

Nmap

theHarvester

samrdump

Hping

Discuss

Answer: (c).samrdump Explanation:The tool samrdump can be used to gather Samba users.

Page 10 of 17

Planning and Scoping Penetration Tests 🔒

Vulnerability Scanning 🔒

Exploiting and Pivoting 🔒

Exploiting Network Vulnerabilities 🔒

Exploiting Application Vulnerabilities 🔒

Attacking Hosts,Cloud Technologies and Specialized Systems 🔒

Scripting for Penetration Testing 🔒

Welcome to the Information Gathering MCQs Page

Information Gathering MCQs | Page 10 of 17

Explore more Topics under CompTIA PenTest+ Certification Exam PT0 002

Penetration Testing

Analyzing Vulnerability Scans

Exploiting Physical and Social Vulnerabilities

Reporting and Communication

Suggested Topics

MS Office

DBMS

R Programming

Operating System

Human Computer Interaction

Java Programming

CSS

HTML

Cyber Security