Ethical Hacking Lecture 2: Information Gathering

<p>95% (C)</p> Signup and view all the answers

<p>To create a list of potential attack vectors for the target. (D)</p> Signup and view all the answers

<p>$70 billion (C)</p> Signup and view all the answers

<p>Gaining an unfair advantage over competitors (D)</p> Signup and view all the answers

<p>Proprietary information that is not publicly known and provides a competitive advantage. (C)</p> Signup and view all the answers

<p>The technologies used internally (B)</p> Signup and view all the answers

<p>Interacting with identified information technology organizations (C)</p> Signup and view all the answers

<p>Information on remote access portals visible on the homepage (D)</p> Signup and view all the answers

<p>A list of known applications used by the organization (C)</p> Signup and view all the answers

<p>Searching for discussions by technicians about technology issues (D)</p> Signup and view all the answers

<p>Sending test packets to public systems for response profiling (A)</p> Signup and view all the answers

<p>Understanding the complexity of defensive human capability (C)</p> Signup and view all the answers

<p>The inherent complexity of human defensive capabilities (B)</p> Signup and view all the answers

<p>Presence of a CERT/CSIRT/PSRT team (B)</p> Signup and view all the answers

<p>Listing of security as a requirement (D)</p> Signup and view all the answers

<p>theHarvester (B)</p> Signup and view all the answers

<p>A phase of information gathering from an external perspective (C)</p> Signup and view all the answers

<p>Lack of internal security management (B)</p> Signup and view all the answers

<p>Parent-teacher association contact info (D)</p> Signup and view all the answers

<p>Verifying their social media accounts (D)</p> Signup and view all the answers

<p>Specific individuals active in security discussions (D)</p> Signup and view all the answers

<p>Physical Security Analysis (A), Social Engineering (D)</p> Signup and view all the answers

<p>To identify potential vulnerabilities and entry points into an organization (C)</p> Signup and view all the answers

<p>A detailed network topology diagram (A)</p> Signup and view all the answers

<p>The company's marketing plan (C)</p> Signup and view all the answers

<p>A government utilizing cyberattacks to disrupt a foreign country's critical infrastructure (D)</p> Signup and view all the answers

<p>Using company resources for personal benefit (D)</p> Signup and view all the answers

<p>Creating a positive and supportive work environment (C)</p> Signup and view all the answers

<p>Using social engineering techniques to gain access to confidential information (B)</p> Signup and view all the answers

<p>OSINT is always accurate and up-to-date. (B)</p> Signup and view all the answers

<p>It is unable to gather real-time data, making the information potentially outdated. (A)</p> Signup and view all the answers

<p>Querying published name servers for information about the target organization's domain. (C)</p> Signup and view all the answers

<p>Storing and archiving websites to showcase their historical evolution. (C)</p> Signup and view all the answers

<p>Personal contact information of the domain owner. (A)</p> Signup and view all the answers

<p>The potential for online information to be used for malicious purposes. (C)</p> Signup and view all the answers

<p>Semi-passive methods aim to appear as normal internet traffic, while active methods involve more intrusive techniques. (C)</p> Signup and view all the answers

<p>Using Google Search to find specific files or documents on a website. (B)</p> Signup and view all the answers

<p>To gather information about employees and their activities. (D)</p> Signup and view all the answers

<p>Social engineering (C)</p> Signup and view all the answers

<p>To determine the target's reliance on external resources and create social engineering scenarios. (C)</p> Signup and view all the answers

<p>The target's internal organizational hierarchy and key decision-makers. (C)</p> Signup and view all the answers

<p>Using techniques that are likely to be detected by the target. (B)</p> Signup and view all the answers

<p>Creating targeted social engineering campaigns aimed at specific individuals. (B)</p> Signup and view all the answers

<p>Using a port scanner to identify open ports on the target's network. (A)</p> Signup and view all the answers

<p>It can provide details about the domain's owner, registrar, and other relevant information. (B)</p> Signup and view all the answers

Data collected from publicly available sources used for intelligence purposes.

Collecting information without alerting the target, using only existing data.

Profiling a target cautiously to appear like normal internet traffic.

Engaging directly with the target to gather information, often detectable.

A tool that shows historical versions of websites over time.

A database that contains information about registered domain names and their owners.

Advanced Google search techniques used to find hidden data.

OSINT may not be reliable, accurate, or timely due to data manipulation or age.

Illicit activities often committed by employees or insiders.

Deceptive practices to gain information or access, like impersonation.

State-sponsored actions aimed at gaining information superiority.

Types of data that attackers seek to infiltrate organizations.

Techniques to identify vulnerabilities in systems or networks.

Techniques used to collect actionable intelligence on targets.

Policies and measures that protect organizational assets.

The reconnaissance phase to collect data on a target for penetration testing.

Open-Source Intelligence; publicly available data used for intelligence gathering.

Gathering data legally to understand competitors and inform decision-making.

The illegal collection of proprietary information for economic advantage.

The process of creating a detailed map of a target's systems and networks.

Information that provides a business advantage over competitors.

Security testing to identify vulnerabilities by simulating cyberattacks.

Initial stage of penetration testing involving mapping out network infrastructure and services.

Scanning for weaknesses in systems or services during active information gathering.

Manipulating individuals to divulge confidential information by exploiting human psychology.

Physical reconnaissance focusing on the target environment over time to detect patterns.

Collecting information from important locations that relate to the organization.

Visual representation of the structure of an organization showing relationships and roles.

Information that provides details about a data/document such as author, date created, etc.

Information about a target's technologies and systems that can aid in attack scenarios.

Using public forums and resources to gather intel on target technologies.

Details on how users connect to a target, revealing potential entry points.

A collection of applications used by the target, often extractable from metadata.

Collecting tech information through public discussions without alerting the target.

Directly testing target systems with specific probes to reveal technology.

Identifying security measures employed by the target organization through various methods.

Understanding a target's defensive human resources and their effectiveness is challenging.

Teams responsible for responding to computer security incidents.

Analyzing job ads that require security expertise to assess security focus.

Determining if an organization's security is managed externally.

Mapping an individual's location history for potential security insights.

Observing an individual’s online activities and identifiable information.

A Python tool to automate finding email addresses from search engines.

Finding corporate email addresses through various online sources.