Certified Ethical Hacker Footprinting and Reconnaissance 2

Question 1

What is Shodan primarily used for during the reconnaissance phase of ethical hacking?

Accepted Answer

Finding internet-connected devices and their exposed services

Answer

Shodan is a search engine that indexes internet-connected devices, revealing open ports, running services, and banners useful for identifying exposed infrastructure.

Question 2

Which DNS record type maps a domain name to an IPv6 address?

Accepted Answer

AAAA record

Answer

The AAAA (quad-A) record maps a domain name to a 128-bit IPv6 address, while the A record maps to a 32-bit IPv4 address.

Question 3

What security risk does an improperly configured DNS zone transfer (AXFR) present to an organization?

Accepted Answer

Exposes the entire DNS database including all internal hostnames to unauthorized parties

Answer

An unrestricted DNS zone transfer exposes all DNS records for a domain, giving attackers a complete map of the internal network infrastructure and hostnames.

Question 4

What is the primary purpose of using Traceroute/Tracert during network footprinting?

Accepted Answer

Map the network path and identify intermediate routers between attacker and target

Answer

Traceroute maps the route packets take to reach a destination, revealing intermediate routers, network topology, TTL values, and potential firewall or IDS locations.

Question 5

What type of sensitive organizational information can an attacker gather by analyzing a company's job postings?

Accepted Answer

Technology stack, software versions, and internal roles used by the organization

Answer

Job postings commonly list required technologies, frameworks, and software versions that reveal the organization's technical environment and potential attack vectors.

Certified Ethical Hacker Practice Test

Certified Ethical Hacker Practice Test

Certified Ethical Hacker Footprinting and Reconnaissance 2