eJPT Information Gathering and Reconnaissance 4

Question 1

What is the purpose of the `-A` flag in Nmap?

Accepted Answer

Enable aggressive mode: OS detection, version detection, scripts, and traceroute

Answer

Nmap's `-A` flag enables aggressive scanning including OS detection (`-O`), version detection (`-sV`), script scanning (`-sC`), and traceroute.

Question 2

A DNS MX record is used to identify which of the following?

Accepted Answer

Mail exchange servers responsible for email delivery

Answer

MX (Mail Exchange) records specify the mail servers responsible for receiving email for a domain.

Question 3

Which technique involves impersonating a vendor calling an employee to extract information about internal systems?

Accepted Answer

Pretexting

Answer

Pretexting involves creating a fabricated scenario (pretext) — such as impersonating a vendor — to manipulate someone into revealing information.

Question 4

When running `nmap -p 1-1000 192.168.1.1`, what range of ports is scanned?

Accepted Answer

Ports 1 through 1000

Answer

The `-p 1-1000` flag explicitly instructs Nmap to scan TCP ports 1 through 1000 on the target.

Question 5

What does the acronym OSINT stand for?

Accepted Answer

Open Source Intelligence

Answer

OSINT stands for Open Source Intelligence — information gathered from publicly available sources.

(eJPT) eLearnSecurity Junior Penetration Tester Certification Practice Test