To find the names and addresses of employees or technical points of contact, which footprinting tool or technique can be used?

A whois

explanation

Involving technical and business POC addresses and e-mails, whois gives domain registration information.

Explore more Cehv10 questions

Take more free practice tests for other PASSEMALL topics with our ceh training now!

Comments

Leave a Reply Cancel reply

Which of the following is a method of passive footprinting?

Collecting information through publicly accessible sources

The focus of passive footprinting is on publicly accessible sources.

While footprinting a network, you successfully perform a zone transfer. Which DNS record in the zone transfer indicates the company's e-mail server?

MX records define a server as an e-mail server. An associated A record will define the name-to-IP-address translation for the server.

A security colleague is puzzled by a recent event. An attacker successfully gained access to a workstation in the business and stole important data. Following the heist, a complete vulnerability scan was performed, and nothing was revealed. Which of the following best describes what occurred?

The attacker took advantage of a zero-day vulnerability on the machine.

A zero-day vulnerability is one that security personnel, vendors, and even vulnerability scanners are unaware of. It is more plausible that the attacker is employing an attack vector unknown to security staff than that he has managed to disable all security measures without informing anybody.

For footprinting restricted URLs and OS information from a target, which of the following would be the best option?

Netcraft

“Netcraft provides internet security services such as anti-fraud and anti-phishing, application testing, and PCI scanning.” according to the website. Netcraft is the greatest option in this case.

Which DNS record allows you to alias both services to the same record (IP address) if you have an FTP service and an HTTP site on a single server?

CNAME

CNAME records are used to create aliases in a zone.

The following is an SOA record obtained via a zone transfer: What is the name of the domain's authoritative DNS server, and how frequently will secondary servers check in for updates?

DNSRV1.anycomp.com, 3,600 seconds

The SOA always begins by defining the authoritative server (in this example, DNSRV1), followed by e-mail contact information along with a few additional items. The refresh time specifies how frequently secondary servers will check for updates—in this example, 3,600 seconds (1 hour).

Which type of footprinting are you accomplishing?
As a member of the pen test team, you begin by searching for IP ranges held by the target organization and determining their network range. You also look at job listings, news stories, and the organization's website. During the first week of the exam, you also observe when personnel arrive and go from work, as well as rummage through the trash outside the building for helpful information.

Passive

All the methods discussed are passive in nature, per EC-Council’s definition.
Acording to Walker, Matt. CEH Certified Ethical Hacker Bundle, Second Edition (All-in-One) (Kindle Locations 2354-2355). McGraw-Hill Education. Kindle Edition.

All pages which have the words SQL and Version in their titles would be displayed by which Google hack?

allintitle:SQL version

Allintitle is a Google search operator that allows you to combine strings in the title. The operator inurl just searches the site's URL.

Which DNS record type most commonly used for DNS lookups relates an IP address to a hostname?

IP-address-to-name mappings is provided by A records

Which of the following best describes the role that CSIRT - US Computer Security Incident Response Team provides?

A reliable and consistent point of contact for all incident response services for associates of the Department of Homeland Security.

In collaboration with the Department of Homeland Security, CSIRT provides incident response services to any user, company, agency, or organization.