nerdexam
GIAC

GPEN · Question #301

You see the career section of a company's Web site and analyze the job profile requirements. You conclude that the company wants professionals who have a sharp knowledge of Windows server2003 and…

The correct answer is C. Reconnaissance. Analyzing publicly available information such as job postings to identify a target's technology stack is the Reconnaissance phase of ethical hacking.

Penetration Testing Foundations & Reconnaissance

Question

You see the career section of a company's Web site and analyze the job profile requirements. You conclude that the company wants professionals who have a sharp knowledge of Windows server2003 and Windows active directory installation and placement. Which of the following steps are you using to perform hacking?

Options

  • AScanning
  • BGaining access
  • CReconnaissance
  • DCovering tracks

How the community answered

(40 responses)
  • A
    8% (3)
  • B
    3% (1)
  • C
    78% (31)
  • D
    13% (5)

Why each option

Analyzing publicly available information such as job postings to identify a target's technology stack is the Reconnaissance phase of ethical hacking.

AScanning

Scanning involves actively probing a target's network or systems for open ports and vulnerabilities, not passively reading public information from a website.

BGaining access

Gaining access involves exploiting discovered vulnerabilities to penetrate a system, which is a later phase that has not yet occurred at this stage.

CReconnaissanceCorrect

Reconnaissance (also called footprinting) is the first phase of ethical hacking where an attacker gathers publicly available information about a target without directly interacting with its systems. Reviewing job postings to identify specific technologies like Windows Server 2003 and Active Directory is passive reconnaissance. This intelligence helps attackers understand the target infrastructure before planning further attack steps.

DCovering tracks

Covering tracks is the final hacking phase focused on removing evidence of an intrusion after a system has already been compromised.

Concept tested: Passive reconnaissance and footprinting in ethical hacking

Source: https://csrc.nist.gov/glossary/term/reconnaissance

Topics

#OSINT#passive reconnaissance#footprinting#hacking phases

Community Discussion

No community discussion yet for this question.

Full GPEN Practice