Cybersecurity Information Gathering Techniques

<p>Reviewing publicly available information about the organization (B)</p> Signup and view all the answers

<p>Passive information gathering is undetectable, while active information gathering may be detected by the target. (B)</p> Signup and view all the answers

<p>Cloud storage (C)</p> Signup and view all the answers

<p>Implementing a strict policy for data deletion and disposal (C)</p> Signup and view all the answers

<p>Vulnerability Assessment (C)</p> Signup and view all the answers

<p>Threats are often static and unchanging, meaning they are easy to define. (D)</p> Signup and view all the answers

<p>Threats, Vulnerabilities, and Assets (D)</p> Signup and view all the answers

<p>To ensure complete protection against all possible threats (C)</p> Signup and view all the answers

<p>To identify potential security threats in software development (D)</p> Signup and view all the answers

<p>The tool is not compatible with all software development methodologies (C)</p> Signup and view all the answers

<p>Using Nmap for Target Scanning (B)</p> Signup and view all the answers

<p>Countermeasures (C)</p> Signup and view all the answers

<p>To identify and analyze potential security threats to a system or application. (A)</p> Signup and view all the answers

<p>User Name (D)</p> Signup and view all the answers

<p>Netcat (B)</p> Signup and view all the answers

<p>Wireshark (C)</p> Signup and view all the answers

<p>nmap -sV 192.168.1.1 (B)</p> Signup and view all the answers

<p>Interactive Information Gathering (C)</p> Signup and view all the answers

<p>To gather as much information as possible about the target to be used in later phases of the penetration test. (B)</p> Signup and view all the answers

<p>Security Auditing (D)</p> Signup and view all the answers

<p>To avoid detection by the target while gathering information. (C)</p> Signup and view all the answers

<p>It may provide outdated or inaccurate information. (B)</p> Signup and view all the answers

<p>It uses network-level port scans to gather information. (D)</p> Signup and view all the answers

<p>Passive information gathering relies on archived information, while Semi-Passive information gathering involves querying published name servers. (C)</p> Signup and view all the answers

<p>To gather enough information for the subsequent steps in the penetration testing process. (D)</p> Signup and view all the answers

<p>To identify potential vulnerabilities that might be exploited by attackers (D)</p> Signup and view all the answers

<p>Deploying a firewall only on the perimeter of the network (B)</p> Signup and view all the answers

<p>To understand the potential threats and their impact on the system (D)</p> Signup and view all the answers

<p>Full disclosure immediately releases information to the public, while responsible disclosure allows the vendor time to fix the issue before public release. (D)</p> Signup and view all the answers

<p>The specific vulnerability exploited by the threat actor (C)</p> Signup and view all the answers

<p>To identify patterns of malicious activity indicative of an attack (B)</p> Signup and view all the answers

<p>To establish clear communication and expectations with the client (A)</p> Signup and view all the answers

<p>Banners can reveal information about the operating system and software versions being used, which attackers use to identify vulnerabilities. (A)</p> Signup and view all the answers

Collecting data from a target using direct interaction, often involving probing tools.

Gathering data without alerting or interacting directly with the target, utilizing only existing information.

Querying public information while mimicking normal internet traffic to avoid detection.

Open Source Intelligence; publicly available information collected for intel purposes.

Identifying weaknesses in a target's systems that can be exploited.

Assessing potential threats to a system and developing mitigation strategies.

The process of identifying active devices and open ports on a target for further assessment.

Extracting information presented by services running on open ports to identify versions and potential vulnerabilities.

Investigation after an event to trace activities but without identifying individuals.

Strategies to prevent unauthorized info collection from public sources.

Network mapping tool used to discover hosts and services on a network.

Checking data attributes before publishing to prevent information leakage.

The reliable data obtained about a service, including its name, version, and operating system.

A versatile tool for connecting to ports and reading banners, often called the Swiss Army Knife of networking.

Protocols that typically return banners when connected, such as HTTP, FTP, and SMTP.

An entity that wants to cause harm to you or something you care about.

A weakness in a system that can be exploited by threats.

A valuable resource or component that needs protection from threats.

The likelihood or capacity for an asset to be harmed by a threat.

Occurrences that can lead to harm or damage to assets.

The process where different engineers may evaluate and understand threats in diverse ways.

A structured approach by Microsoft for integrating security in software development.

Strategies used to identify and assess potential threats in software and systems.

Dividing a network into smaller sections to enhance security and reduce risks.

Tools that monitor network traffic for suspicious activity and potential threats.

Reviewing logs from network and applications to identify unusual patterns or incidents.

Activity that deviates from the norm and may indicate potential security issues.

Reporting vulnerabilities to the responsible party without public escalation until they respond.

An individual or entity intending to cause harm to a system.

Any action taken by a threat agent that can cause harm to an asset.

Ways of sharing vulnerabilities: no, limited, full, and responsible disclosure.