eJPT Information Gathering and Reconnaissance

Question 1

What is the primary purpose of passive reconnaissance in penetration testing?

Accepted Answer

To gather information without directly interacting with the target

Answer

Passive reconnaissance collects information about a target without direct interaction, reducing the chance of detection.

Question 2

Which tool is commonly used for DNS enumeration during information gathering?

Accepted Answer

nslookup and dig

Answer

nslookup and dig are standard DNS query tools used to enumerate DNS records and discover subdomains during reconnaissance.

Question 3

What is OSINT in the context of penetration testing?

Accepted Answer

Open Source Intelligence gathering from publicly available information

Answer

OSINT involves collecting intelligence from publicly available sources such as websites, social media, and public records.

Question 4

What type of information does a WHOIS lookup provide?

Accepted Answer

Domain registration details including registrant and contact information

Answer

WHOIS lookups reveal domain registration information including registrant details, nameservers, and registration dates.

Question 5

What is the purpose of port scanning during active reconnaissance?

Accepted Answer

To identify open ports and running services on target systems

Answer

Port scanning identifies open ports and running services, revealing the attack surface and potential entry points.

(eJPT) eLearnSecurity Junior Penetration Tester Certification Practice Test