Welcome to the Information Gathering MCQs Page

Dive deep into the fascinating world of Information Gathering with our comprehensive set of Multiple-Choice Questions (MCQs). This page is dedicated to exploring the fundamental concepts and intricacies of Information Gathering, a crucial aspect of CompTIA PenTest+ Certification Exam PT0 002. In this section, you will encounter a diverse range of MCQs that cover various aspects of Information Gathering, from the basic principles to advanced topics. Each question is thoughtfully crafted to challenge your knowledge and deepen your understanding of this critical subcategory within CompTIA PenTest+ Certification Exam PT0 002.

Check out the MCQs below to embark on an enriching journey through Information Gathering. Test your knowledge, expand your horizons, and solidify your grasp on this vital area of CompTIA PenTest+ Certification Exam PT0 002.

Note: Each MCQ comes with multiple answer choices. Select the most appropriate option and test your understanding of Information Gathering. You can click on an option to test your knowledge before viewing the solution for a MCQ. Happy learning!

Information Gathering MCQs | Page 14 of 17

Explore more Topics under CompTIA PenTest+ Certification Exam PT0 002

01

Penetration Testing

02

Planning and Scoping Penetration Tests 🔒

03

Vulnerability Scanning 🔒

04

Analyzing Vulnerability Scans

05

Exploiting and Pivoting 🔒

06

Exploiting Network Vulnerabilities 🔒

07

Exploiting Physical and Social Vulnerabilities

08

Exploiting Application Vulnerabilities 🔒

09

Attacking Hosts,Cloud Technologies and Specialized Systems 🔒

10

Reporting and Communication

11

Scripting for Penetration Testing 🔒

Q131.

In malware analysis, what utility is often useful once malware has been decoded from various packing methods that attempt to obfuscate the code?

Decompiler

Debugger

Strings

Eclipse

Discuss

Answer: (c).Strings Explanation:In malware analysis, the `strings` utility is often useful once malware has been decoded from various packing methods that attempt to obfuscate the code.

Q132.

What is a shortcut that provides some useful information from compiled code without decompiling?

Using a debugger

Running the `strings` utility

Employing Eclipse

Decompiling the code

Discuss

Answer: (b).Running the `strings` utility Explanation:A shortcut that provides some useful information from compiled code without decompiling is running the `strings` utility.

Q133.

In the context of penetration testing, when is the use of a debugger likely to be more relevant?

During the passive information-gathering phase

In the early phases when avoiding detection is crucial

When analyzing source code for additional information

When employing Nmap for active reconnaissance

Discuss

Answer: (c).When analyzing source code for additional information Explanation:In the context of penetration testing, the use of a debugger is likely to be more relevant when analyzing source code for additional information.

Q134.

Which tool has built-in capabilities intended to reduce the likelihood of detection by slowing down testing, randomizing ports, using multiple scanning systems or IP addresses, and faking source addresses?

Eclipse

Debugger

Nmap

Decompiler

Discuss

Answer: (c).Nmap Explanation:Nmap has built-in capabilities intended to reduce the likelihood of detection by slowing down testing, randomizing ports, using multiple scanning systems or IP addresses, and faking source addresses.

Q135.

In what situations is the need to avoid detection typically determined in penetration testing?

In every penetration test regardless of the type

In known environment tests that are disclosed to security staff

Only in zero knowledge tests

Only in passive information-gathering techniques

Discuss

Answer: (b).In known environment tests that are disclosed to security staff Explanation:The need to avoid detection is typically determined in known environment tests that are disclosed to security staff and administrators.

Q136.

What is a common defense against active reconnaissance that relies on network defenses?

Using encryption

Limiting external exposure of services

Employing honeypots

Using CAPTCHAs

Discuss

Answer: (b).Limiting external exposure of services Explanation:A common defense against active reconnaissance that relies on network defenses is limiting external exposure of services.

Q137.

What technology is a defensive measure against active reconnaissance to limit or stop probes and prevent scanning?

Encryption

IDS/IPS

CAPTCHAs

Rate limiting

Discuss

Answer: (b).IDS/IPS Explanation:IDS/IPS (Intrusion Detection System/Intrusion Prevention System) is a defensive technology against active reconnaissance to limit or stop probes and prevent scanning.

Q138.

What is critical for a penetration tester to monitor when conducting active reconnaissance activities to avoid detection?

Monitoring external services

Monitoring internal networks

Monitoring their own efforts for signs of detection

Monitoring passive information gathering techniques

Discuss

Answer: (c).Monitoring their own efforts for signs of detection Explanation:It is critical for a penetration tester to monitor their own efforts for signs of detection when conducting active reconnaissance activities.

Q139.

What is a challenge for organizations in preventing passive information gathering?

Active defenses blocking all passive information-gathering techniques

Lack of controls to apply to passive information gathering

Limited exposure of information that organizations release

Difficulty in detecting passive information gathering

Discuss

Answer: (c).Limited exposure of information that organizations release Explanation:A challenge for organizations in preventing passive information gathering is the limited control over the information they release.

Q140.

What is one of the DNS protection techniques to prevent misuse of domain information in passive information gathering?

Using encryption

Blacklisting systems or networks

Employing honeypots

Rate limiting

Discuss

Answer: (b).Blacklisting systems or networks Explanation:Blacklisting systems or networks is one of the DNS protection techniques to prevent misuse of domain information in passive information gathering.

Page 14 of 17

Planning and Scoping Penetration Tests 🔒

Vulnerability Scanning 🔒

Exploiting and Pivoting 🔒

Exploiting Network Vulnerabilities 🔒

Exploiting Application Vulnerabilities 🔒

Attacking Hosts,Cloud Technologies and Specialized Systems 🔒

Scripting for Penetration Testing 🔒

Welcome to the Information Gathering MCQs Page

Information Gathering MCQs | Page 14 of 17

Explore more Topics under CompTIA PenTest+ Certification Exam PT0 002

Penetration Testing

Analyzing Vulnerability Scans

Exploiting Physical and Social Vulnerabilities

Reporting and Communication

Suggested Topics

Cloud Computing

Computer Graphics

Human Computer Interaction

Data Structures and Algorithms

Reverse Engineering

R Programming

Java Spring Framework

Formal Languages and Automata Theory

Software Architecture and Design