Analyzing Reconnaissance Threats to Computing and Network Environments

Question 1

Reconnaissance Steps

Answer 1

Footprinting, Scanning, Enumeration

Question 2

Footprinting

Answer 2

First, passive phase in which an attacker gathers general information about a target before an attack

Question 3

Scanning

Answer 3

Active phase that involves using tools to discover info about hosts and services on a network

Question 4

Enumeration

Answer 4

Last, active phase where the attacker tries to map the network as a whole to identify potential targets

Question 5

Recon Evasion Techniques

Answer 5

Obfuscating packet data, fragmenting data into multiple packets, encrypting traffic, DoS the NIDS

Question 6

Packet Trace Analysis

Answer 6

Traffic analysis where insights are gained from the metadata of captured packets

Question 7

Social Engineering

Answer 7

Deceiving people into giving away access or confidential information to unauthorized parties