Reconnaissance techniques and vulnerability scanning concepts tested on the CompTIA PenTest+ exam.
40 cards · basic cards · AI-written, checked twice. Edit anything.
- What is passive reconnaissance?
- Information gathering about a target without direct engagement or detection.
- What is active reconnaissance?
- Directly engaging with target systems to gather information.
- What does OSINT stand for?
- Open Source Intelligence.
- What is footprinting in penetration testing?
- The process of systematically gathering preliminary information about a target organization and its systems.
- What information does WHOIS provide?
- Domain registration details including registrant name, address, contact information, and nameserver details.
- What is DNS enumeration?
- Gathering DNS records from a target domain to discover subdomains, IP addresses, and mail servers.
- What is banner grabbing?
- Extracting service version and software information from servers by connecting to open ports and capturing response data.
- What is a DNS zone transfer attack?
- Attempting to retrieve an entire DNS zone database (AXFR) from a nameserver, exposing all hosts within the domain.
- What does the nslookup tool do?
- Queries DNS servers to resolve domain names to IP addresses and retrieve DNS records.
- What does the dig tool do?
- Performs DNS lookups and zone transfers, providing detailed DNS query responses and zone information.
- What is network scanning?
- Probing a network to identify active hosts, open ports, and running services.
- What does a TCP SYN scan do in Nmap?
- Sends SYN packets to target ports; if a port responds with SYN-ACK, it is open.
- What is UDP scanning used for?
- Discovering open UDP ports and services that use the UDP protocol.
- What is packet sniffing in reconnaissance?
- Capturing and analyzing network traffic to extract sensitive information and understand network behavior.
- What is enumeration?
- The process of extracting detailed information about discovered services, users, shares, and systems.