Reconnaissance techniques and vulnerability scanning concepts tested on the CompTIA PenTest+ exam.
40 cards · basic cards · AI-written, checked twice. Edit anything.
- What is passive reconnaissance?
Show answer
Information gathering about a target without direct engagement or detection.- What is active reconnaissance?
Show answer
Directly engaging with target systems to gather information.- What does OSINT stand for?
Show answer
Open Source Intelligence.- What is footprinting in penetration testing?
Show answer
The process of systematically gathering preliminary information about a target organization and its systems.- What information does WHOIS provide?
Show answer
Domain registration details including registrant name, address, contact information, and nameserver details.- What is DNS enumeration?
Show answer
Gathering DNS records from a target domain to discover subdomains, IP addresses, and mail servers.- What is banner grabbing?
Show answer
Extracting service version and software information from servers by connecting to open ports and capturing response data.- What is a DNS zone transfer attack?
Show answer
Attempting to retrieve an entire DNS zone database (AXFR) from a nameserver, exposing all hosts within the domain.- What does the nslookup tool do?
Show answer
Queries DNS servers to resolve domain names to IP addresses and retrieve DNS records.- What does the dig tool do?
Show answer
Performs DNS lookups and zone transfers, providing detailed DNS query responses and zone information.- What is network scanning?
Show answer
Probing a network to identify active hosts, open ports, and running services.- What does a TCP SYN scan do in Nmap?
Show answer
Sends SYN packets to target ports; if a port responds with SYN-ACK, it is open.- What is UDP scanning used for?
Show answer
Discovering open UDP ports and services that use the UDP protocol.- What is packet sniffing in reconnaissance?
Show answer
Capturing and analyzing network traffic to extract sensitive information and understand network behavior.- What is enumeration?
Show answer
The process of extracting detailed information about discovered services, users, shares, and systems.
FlashKeepers