nerdexam
EC-Council

312-50V11 · Question #773

Peter is surfing the internet looking for information about DX Company. Which hacking process is Peter doing?

The correct answer is B. Footprinting. Passively gathering publicly available information about a target organization from the internet is the footprinting phase, the first step in the ethical hacking methodology.

Footprinting and Reconnaissance

Question

Peter is surfing the internet looking for information about DX Company. Which hacking process is Peter doing?

Options

  • AScanning
  • BFootprinting
  • CEnumeration
  • DSystem Hacking

How the community answered

(69 responses)
  • A
    1% (1)
  • B
    87% (60)
  • C
    4% (3)
  • D
    7% (5)

Why each option

Passively gathering publicly available information about a target organization from the internet is the footprinting phase, the first step in the ethical hacking methodology.

AScanning

Scanning involves actively probing a target's network or systems with tools like port scanners to discover live hosts and open services, which Peter is not doing.

BFootprintingCorrect

Footprinting is the passive reconnaissance phase where an attacker collects publicly available data about a target such as company details, domain names, and personnel information from the internet without directly interacting with target systems. It is the precursor to active scanning and exploitation. Peter browsing the internet for information about DX Company matches this definition exactly.

CEnumeration

Enumeration involves extracting detailed system-level information such as usernames, shares, and services through direct interaction with a target after initial contact is established, not passive internet browsing.

DSystem Hacking

System hacking refers to actively exploiting discovered vulnerabilities to gain unauthorized access to systems, which is far beyond the passive internet research Peter is conducting.

Concept tested: Footprinting as first phase of ethical hacking methodology

Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-115.pdf

Topics

#footprinting#passive reconnaissance#OSINT#information gathering

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice