adplus-dvertising

Welcome to the Information Gathering MCQs Page

Dive deep into the fascinating world of Information Gathering with our comprehensive set of Multiple-Choice Questions (MCQs). This page is dedicated to exploring the fundamental concepts and intricacies of Information Gathering, a crucial aspect of CompTIA PenTest+ Certification Exam PT0 002. In this section, you will encounter a diverse range of MCQs that cover various aspects of Information Gathering, from the basic principles to advanced topics. Each question is thoughtfully crafted to challenge your knowledge and deepen your understanding of this critical subcategory within CompTIA PenTest+ Certification Exam PT0 002.

frame-decoration

Check out the MCQs below to embark on an enriching journey through Information Gathering. Test your knowledge, expand your horizons, and solidify your grasp on this vital area of CompTIA PenTest+ Certification Exam PT0 002.

Note: Each MCQ comes with multiple answer choices. Select the most appropriate option and test your understanding of Information Gathering. You can click on an option to test your knowledge before viewing the solution for a MCQ. Happy learning!

Information Gathering MCQs | Page 3 of 17

Explore more Topics under CompTIA PenTest+ Certification Exam PT0 002

Q21.
How can the host command in Linux be useful for information gathering?

a.

It provides information about system email servers (MX servers).

b.

It reveals an organization's financial data.

c.

It identifies the organization's security features.

d.

It discloses the organization's internal network structure.

Discuss
Answer: (a).It provides information about system email servers (MX servers). Explanation:The host command in Linux provides information about a system's IPv4 and IPv6 addresses, as well as its email (MX) servers, aiding in information gathering.
Q22.
What tool is commonly used for DNS lookups on Windows, Linux, and macOS systems?

a.

nslookup

b.

traceroute

c.

ping

d.

netstat

Discuss
Answer: (a).nslookup Explanation:nslookup is commonly used for DNS lookups on Windows, Linux, and macOS systems.
Q23.
What type of information can be obtained from TLS certificates?

a.

Financial data

b.

System's internal network structure

c.

Email servers

d.

Domain names and individuals inside an organization

Discuss
Answer: (d).Domain names and individuals inside an organization Explanation:TLS certificates can provide information about systems, domain names, and individuals inside an organization, including details found in the subject alternative name.
Q24.
What does an out-of-date TLS certificate indicate?

a.

Proper systems maintenance

b.

Updated and secure systems

c.

Poor systems maintenance

d.

Adequate configuration

Discuss
Answer: (c).Poor systems maintenance Explanation:An out-of-date TLS certificate may indicate poor systems maintenance, suggesting that the system or device isn't being properly updated and maintained, potentially leading to other flaws or misconfigurations.
Q25.
How can a penetration tester conduct a DNS zone transfer using the 'dig' command?

a.

dig -zone-transfer domain.name @target.nameserver.com

b.

dig -axfr @target.nameserver.com domain.name

c.

dig -zone-transfer @target.nameserver.com domain.name

d.

dig -zone-transfer domain.name -p53 @target.nameserver.com

Discuss
Answer: (b).dig -axfr @target.nameserver.com domain.name Explanation:To conduct a DNS zone transfer using the 'dig' command, the correct syntax is 'dig axfr @target.nameserver.com domain.name'.
Q26.
What information can be obtained from a DNS zone transfer?

a.

Email server details

b.

System encryption keys

c.

Latitude and longitude of the organization

d.

Network topology and IP address mappings

Discuss
Answer: (d).Network topology and IP address mappings Explanation:A DNS zone transfer provides information such as name server details, contact information, serial number, time between changes, minimum time to live, MX records, latitude and longitude, TXT records, service records, IP address mappings, and other relevant data.
Q27.
In case a zone transfer is not possible, how can DNS information still be gathered?

a.

By sending a DNS query for each IP address

b.

By brute force attack on the DNS server

c.

By exploiting DNS vulnerabilities

d.

By intercepting DNS traffic

Discuss
Answer: (a).By sending a DNS query for each IP address Explanation:If a zone transfer is not possible, DNS information can still be gathered by sending a DNS query for each IP address that the organization uses, thus creating a useful list of systems.
Q28.
What can be determined by looking up the IP range of a system?

a.

Organization's financial data

b.

Hosting services used by the company

c.

Social media profiles of employees

d.

DNS encryption keys

Discuss
Answer: (b).Hosting services used by the company Explanation:Looking up the IP range of a system can provide information about the company or the hosting services it uses.
Q29.
How can traceroute be useful for a penetration tester?

a.

It reveals encryption keys of the target system.

b.

It identifies social media profiles of employees.

c.

It shows the path packets take to the host, revealing network topology.

d.

It provides information about the organization's financial data.

Discuss
Answer: (c).It shows the path packets take to the host, revealing network topology. Explanation:Traceroute shows the path packets take to the host, providing insight into the organization's internal network topology.
Q30.
What is the process of scanning for wireless networks while mobile, often in a car?

a.

Warcruising

b.

Warwalking

c.

Warflying

d.

Warboating

Discuss
Answer: (b).Warwalking Explanation:The process of scanning for wireless networks while mobile, usually in a car or by walking through open areas, is known as warwalking.
Page 3 of 17

Suggested Topics

Are you eager to expand your knowledge beyond CompTIA PenTest+ Certification Exam PT0 002? We've curated a selection of related categories that you might find intriguing.

Click on the categories below to discover a wealth of MCQs and enrich your understanding of Computer Science. Happy exploring!

Management Information Systems

Discover how businesses leverage technology with our Management Information Systems...

Digital Communication

Master the basics of electronic communication with our Digital Communication MCQs....

SQL Server

Master Microsoft's database server with our SQL Server MCQs. Topics cover database...

Digital Image Processing (DIP)

Delve into the techniques of enhancing digital images with our Digital Image...

Reverse Engineering

Strengthen your understanding of Reverse Engineering with our curated set of MCQs....

Operating System

Dive deep into the core of computers with our Operating System MCQs. Learn about...

C# programming

Hone your skills in the C# language with our MCQs. Understand data types, operators,...

Discrete Mathematics

Refine your mathematical skills essential for computer science with our Discrete...

JavaScript

Strengthen your web development skills with our JavaScript MCQs. Understand core...