eJPT Information Gathering and Reconnaissance

Question 1

What is the primary purpose of passive reconnaissance in penetration testing?

Accepted Answer

To gather information without directly interacting with the target

Answer

To exploit vulnerabilities directly

Answer

To install backdoors

Answer

To conduct social engineering

Question 2

Which tool is commonly used for DNS enumeration during information gathering?

Accepted Answer

nslookup and dig

Answer

Metasploit

Answer

Burp Suite

Answer

Wireshark

Question 3

What is OSINT in the context of penetration testing?

Accepted Answer

Open Source Intelligence gathering from publicly available information

Answer

A type of exploit

Answer

A network protocol

Answer

A type of malware

Question 4

What type of information does a WHOIS lookup provide?

Accepted Answer

Domain registration details including registrant and contact information

Answer

Server vulnerabilities

Answer

Network traffic data

Answer

Password hashes

Question 5

What is the purpose of port scanning during active reconnaissance?

Accepted Answer

To identify open ports and running services on target systems

Answer

To crash services

Answer

To encrypt traffic

Answer

To delete logs

Question 6

Which reconnaissance technique involves examining website source code and headers?

Accepted Answer

Web application fingerprinting

Answer

Brute force attack

Answer

Password spraying

Answer

Privilege escalation