Footprinting and Social Engineering

Question 1

Footprinting is defined as the process of creating a blueprint or map of an organization’s network
and systems.

Answer 1

Footprinting is defined as the process of creating a blueprint or map of an organization’s network
and systems.

Question 2

google hack commands

Answer 2

filetype
searches only within the text of a particular type of file. The file type to search
must be supplied after the colon. Don’t include a period before the file extension.

link
searches within hyperlinks for a search term and identifies linked pages

cache
identifies the version of a web page. The URL of the site must be supplied after
the colon.

intitle
searches for a term within the title of a document.

inurl
searches only within the URL (web address) of a document. The search term must
follow the colon.

Question 3

Seven steps of information gathering

Answer 3

Footprinting Unearth Initial Information
Locate the Network Range
Ascertain Active Machines
Discover Open Ports/Access Points
Detect Operating Systems
Uncover Services on Ports
Map the Network

Question 4

ARIN

Answer 4

American Registry for Internet Numbers

Question 5

URL

Answer 5

Uniform Resource Locator

Question 6

ICANN

Answer 6

Internet Corporation for Assigned Names and Numbers

Question 7

RIPE NCC

Answer 7

Europe, the Middle East, and parts

of Central Asia)

Question 8

LACNIC

Answer 8

Latin American and Caribbean Internet Addresses

Registry

Question 9

APNIC

Answer 9

Asia Pacific Network Information Centre

Question 10

Identify Different Types of DNS Records

Answer 10

The following list describes the common DNS record types and their use:

A (address)—Maps a host name to an IP address

SOA (Start of Authority)—Identifies the DNS server responsible for the domain information

CNAME (canonical name)—Provides additional names or aliases for the address record

MX (mail exchange)—Identifies the mail server for the domain

SRV (service)—Identifies services such as directory services
PTR (pointer)—Maps IP addresses to host names

NS (name server)—Identifies other name servers for the domain

Question 11

packet-tracking tools

Answer 11

NeoTrace, VisualRoute, and VisualLookout

Question 12

Email Tracking tools

Answer 12

eMailTracking Pro

MailTracking.com

Question 13

Common Types Of Attacks?

Answer 13

Human-based Human-based social engineering refers to person-to-person interaction to retrieve
the desired information. An example is calling the help desk and trying to find out a password.

Computer-based Computer-based social engineering refers to having computer software
that attempts to retrieve the desired information. An example is sending a user an e-mail and
asking them to reenter a password in a web page to confirm it. This social-engineering attack
is also known as phishing.

Question 14

Human-Based Social Engineering

Answer 14

Impersonating an employee or valid user
Posing as an important user
Using a third person
Calling technical support
Shoulder surfing
Dumpster diving

Question 15

What is the next step to be performed after footprinting?

Answer 15

Scanning

Question 16

Faking a website for the purpose of getting a user’s password and username is which type of
social engineering attack?

Answer 16

Computer-based