Deck 1: Applying Environmental Reconnaissance

Question 1

___________________ is the process of gathering information about a person from one or more social media sites to construct a "sketch" of that person.

Answer 1

Social media profiling

Question 2

Which of the following is not a common use of an automated email harvesting tool?

A) Discover the address of specific titles of individuals, such as the CEO of a company
B) Verify the email address of an individual user
C) Send email under false pretenses to solicit information from a selected victim
D) Find the email addresses for a list of employees

Answer 2

C

Question 3

Which of the following is not a principle that is exploited in social engineering?

A) Intimidation
B) Scarcity
C) Desperation
D) Urgency

Answer 3

C

Question 4

Topology discovery is an attempt to uncover the layout of an internal network, which is a key goal of a threat actor.

Question 5

What is the term for sending an email or displaying a web announcement that falsely claims to be from a legitimate enterprise in an attempt to trick the user into surrendering private information?

Question 6

Which of the following is not one of the recognized pairs of network types?

A) Wireless vs. wired
B) Static vs. dynamic
C) Virtual vs. physical
D) Internal vs. external

Question 7

______________ is a generic term for a range of products that look for different vulnerabilities in networks or systems.

Question 8

Which of the following is a networking program that tests whether a particular host can be reached?

A) ifconfig
B) tracert
C) ping
D) nslookup

Question 9

The name of the ______________ tool is an abbreviation for "network mapper."