Ethical Hacking Chapter 4

As a practitioner of ethical hacking, you will not need to be concerned with physical security considerations such as ensuring network assets are protected by a secure locking mechanism.

To find information about the key IT personnel for a company’s domain, you might use which of the following tools? (Choose all that apply.)

_____ is one of the components most vulnerable to network attacks.

Which of the following contains host records for a domain?

A cookie can store information about a Web site’s visitors. True or False?

Which of the following enables you to view all host computers on a network?

What’s one way to gather information about a domain?

Which of the following is one method of gathering information about the operating systems a company is using?

To determine a company’s primary DNS server, you can look for a DNS server containing which of the following?

When conducting competitive intelligence, which of the following is a good way to determine the size of a company’s IT support staff?

If you’re trying to find newsgroup postings by IT employees of a certain company, which of the following Web sites should you visit?

Which of the following tools can assist you in finding general information about an organization and its employees? (Choose all that apply.)

What’s the first method a security tester should attempt to find a password for a computer on
the network?

Many social engineers begin gathering the information they need by using which of the
following?

Discovering a user’s password by observing the keys he or she presses is called which of the following?

Shoulder surfers can use their skills to find which of the following pieces of information? (Choose all that apply.)

Entering a company’s restricted area by following closely behind an authorized person is referred to as which of the following?

What social-engineering technique involves telling an employee that you’re calling
from the CEO’s office and need certain information ASAP? (Choose all that apply.)

Before conducting a security test by using social-engineering tactics, what should you do?

Which of the following is a good Web site for gathering information on a domain?

A. www.google.com
B. www.dnsstuff.com
C. www.namedroppers.com
D. All the above

What’s the first method a security tester should attempt to find a password for acomputer on the network?

A. Install a hardware or software keylogger
B. Install a network sniffer
C. Install a password-cracking program
D. Ask the user

Which social engineering technique or tool can be used to determine passwords,ATM PINs, or badge access codes?

A. peek sneaking
B. shoulder surfing
C. piggy backing
D. dumpster diving

Conducting competitive intelligence is generally considered to be illegal.

A. True
B. False

Connecting to a web server via telnet and using the HEAD HTTP method allows you to determine:

A. Web Server Type
B. Operating System
C. Server Name
D. All of the above