Footprinting and Reconnaissance Flashcards
7 cards from real Certified Ethical Hacker practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Footprinting and Reconnaissance flashcards as text
What is the Wayback Machine (web.archive.org) primarily used for during the footprinting phase?
Answer: Viewing archived versions of websites to find previously exposed sensitive information
The Wayback Machine archives historical website snapshots, enabling attackers to find removed pages, old configuration files, or exposed sensitive data no longer visible on the live site.
Which Regional Internet Registry (RIR) manages IP address allocation for the United States and Canada?
Answer: ARIN
ARIN (American Registry for Internet Numbers) manages IP address allocation and WHOIS data for the United States, Canada, and many Caribbean and North Atlantic territories.
Which Google dork operator restricts search results to pages that contain specific text within the HTML page title?
Answer: intitle:
The 'intitle:' operator searches Google for pages containing the specified keyword within the HTML tag, useful for finding specific types of exposed pages.
What information can an attacker extract by analyzing the headers of an email received from a target organization?
Answer: Internal IP addresses, mail server names, and email routing paths
Email headers contain routing metadata showing each mail server the email passed through, potentially revealing internal IP addresses and mail server infrastructure.
Which tool is specifically designed for automated web crawling, email harvesting, and subdomain enumeration from public sources?
Answer: theHarvester
theHarvester gathers emails, names, subdomains, IPs, and URLs from public sources like search engines and LinkedIn during the passive reconnaissance phase.
What is the purpose of performing a reverse DNS lookup during the footprinting phase?
Answer: Resolve an IP address back to its associated hostname
Reverse DNS lookup maps an IP address back to its hostname, helping attackers identify servers and services associated with specific IP addresses found during scanning.
What is footprinting through social engineering in the context of reconnaissance?
Answer: Gathering information by interacting with or deceiving target employees
Social engineering during reconnaissance involves manipulating or deceiving target employees through phone calls, emails, or impersonation to extract organizational information.