CEHv8 BOOTCAMP: MODULE 02-FOOTPRINTING AND RECONNAISSANCE_SET-3

Question 1

Describe a “RP” record.

Answer 1

Responsible person.

Question 2

Describe a “HINFO” record.

Answer 2

Host information record includes CPU type and OS.

Question 3

Describe a “TXT” record.

Answer 3

Unstructured text records.

Question 4

How can obtaining network range information assist an attacker?

Answer 4

To create a map of the target’s network.

Question 5

How do traceroute programs work?

Answer 5

On the concept of ICMP protocol and use the TTL field in the header of ICMP packets to discover the routers on the path to a target host.

Question 6

Why do attackers use traceroute?

Answer 6

To extract information about: network topology, trusted routers, and firewall location.

Question 7

What is Social Engineering?

Answer 7

The art of convincing people to reveal confidential information.

Question 8

What are 4 techniques used by social engineers?

Answer 8

• Eavesdropping
• Shoulder surfing
• Dumpster diving
• Impersonation on social networking sites

Question 9

What are some things that social engineers attempt to gather?

Answer 9

• Credit Card details and social security numbers
• User names and passwords
• Other personal information
• Security products in use
• Operating systems and software versions
• Network layout information
• IP addresses and names of servers

Question 10

What is Eavesdropping?

Answer 10

Unauthorized listening of conversations or reading of messages.

Question 11

What is Shoulder Surfing?

Answer 11

The procedure where the attackers look over the user’s shoulder to gain critical information.

Question 12

What is Dumpster Diving?

Answer 12

Looking for treasure in someone else’s trash.

Question 13

How do attackers use social networking sites lure employees into giving up sensitive information?

Answer 13

By creating fake profiles on social networking sites and then use the false identity to lure the employees to give up their sensitive information.

Question 14

What is Maltego?

Answer 14

A program that can be used to determine the relationships and real world links between people, groups of people (social networks), companies, organizations, websites, Internet infrastructure, phrases, documents, and files.

Question 15

What can you do with the Footprinting tool Web Data Extractor?

Answer 15

Extract targeted company contact data (email, phone, fax) from web for responsible b2b communication.

Question 16

What are some Footprinting Countermeasures?

Answer 16

• Configure routers to restrict the responses to Footprinting requests.
• Configure web servers to avoid information leakage and disable unwanted protocols.
• Lock the ports with the suitable firewall configuration.
• Use an IDS that can be configured to refuse suspicious traffic and pick up Footprinting patterns.
• Evaluate and limit the amount of information available before publishing it on the website/Internet and disable the unnecessary services.
• Perform Footprinting techniques and remove any sensitive information found.
• Prevent search engines from caching a web page and use anonymous registration services.
• Enforce security policies to regulate the information that employees can reveal to third parties.

Question 17

What is Footprinting Pen Testing used for?

Answer 17

To determine organization’s publicly available information on the internet such as network architecture, operating systems, applications, and users.

Question 18

What can Footprinting Pen Testing help administrators do?

Answer 18

• Prevent information leakage.
• Prevent social engineering attempts.
• Prevent DNS record retrieval from publically available servers.

Question 19

What is the first step in Footprinting Pen Testing?

Answer 19

Get authorization.

Question 20

What is the last step in Footprinting Pen Testing?

Answer 20

Document all the findings.

Question 21

What do DNS records provide?

Answer 21

Important information about location and type of servers.