Exam 4: Footprinting and Social Engineering

____ is trailing closely behind an employee who has access to an area without the person realizing that you didn't use a PIN or a security badge to enter the area.

Namedroppers is a tool that can be used to capture Web server information and possible vulnerabilities in a Web site's pages that could allow exploits such as SQL injection and buffer overflows.

____ means using a knowledge of human nature to get information from people.

____ is a Web tool used to gather IP and domain information. It is available for both UNIX and Window OSs.

MATCHING Match each term with the correct statement below. -Server received invalid response from upstream server

____ enable you to see all the host computers on a network. In other words, they give you an organization's network diagram.

To see additional parameters that can be used with the ____ command, you can type nc -h at the command prompt.

With commands such as ____, you can perform zone transfers of all DNS records.

MATCHING Match each term with the correct statement below. -Unable to match request

MATCHING Match each term with the correct statement below. -Server understands request but refuses to comply

What is the purpose of a Web bug? How do they relate to or differ from spyware?

____ can be used to gather information useful for computer criminals, like company phone directories, financial reports, interoffice memos, resumes of employees, etc.

The HTTP ____ allows data to be sent to a Web server.

How can computer criminals use the Whois utility for their purposes?

List at least five tools available for footprinting.

MATCHING Match each term with the correct statement below. -Request could not be fulfilled by server

MATCHING Match each term with the correct statement below. -Request not allowed for the resource

MATCHING Match each term with the correct statement below. -Server is unavailable due to maintenance or overload

MATCHING Match each term with the correct statement below. -Server did not receive a timely response

How can DNS be used for footprinting?