Certified Ethical Hacker Footprinting and Reconnaissance 3

Question 1

What is the Wayback Machine (web.archive.org) primarily used for during the footprinting phase?

Accepted Answer

Viewing archived versions of websites to find previously exposed sensitive information

Answer

The Wayback Machine archives historical website snapshots, enabling attackers to find removed pages, old configuration files, or exposed sensitive data no longer visible on the live site.

Question 2

Which Regional Internet Registry (RIR) manages IP address allocation for the United States and Canada?

Accepted Answer

ARIN

Answer

ARIN (American Registry for Internet Numbers) manages IP address allocation and WHOIS data for the United States, Canada, and many Caribbean and North Atlantic territories.

Question 3

Which Google dork operator restricts search results to pages that contain specific text within the HTML page title?

Accepted Answer

intitle:

Answer

The 'intitle:' operator searches Google for pages containing the specified keyword within the HTML <title> tag, useful for finding specific types of exposed pages.

Question 4

What information can an attacker extract by analyzing the headers of an email received from a target organization?

Accepted Answer

Internal IP addresses, mail server names, and email routing paths

Answer

Email headers contain routing metadata showing each mail server the email passed through, potentially revealing internal IP addresses and mail server infrastructure.

Question 5

Which tool is specifically designed for automated web crawling, email harvesting, and subdomain enumeration from public sources?

Accepted Answer

theHarvester

Answer

theHarvester gathers emails, names, subdomains, IPs, and URLs from public sources like search engines and LinkedIn during the passive reconnaissance phase.

Certified Ethical Hacker Practice Test

Certified Ethical Hacker Practice Test

Certified Ethical Hacker Footprinting and Reconnaissance 3