100-160 Question 185
Select 4During a routine security assessment, a cybersecurity technician is tasked with identifying vulnerabilities on a company's network. The technician decides to use both active and passive reconnaissance techniques. Which of the following actions align with these techniques?
- A
Using a network vulnerability scanner to identify open ports on company servers
- B
Monitoring social media platforms for information about the company's employees
- C
Analyzing DNS records and WHOIS data for the company's public-facing domains
- D
Running an automated script to perform a penetration test on the company's internal network
- E
Reviewing company-published press releases for potential sensitive details
Show answer and explanation
Correct answers: A, B, C, E
Explanation
Active reconnaissance involves directly interacting with a target's systems to gather information, such as scanning for open ports or vulnerabilities. Passive reconnaissance involves gathering publicly available information about the target without directly interacting with its systems. Using a network scanner, monitoring social media, analyzing DNS records, and reviewing press releases are all valid techniques for vulnerability identification using both active and passive methods.
- A. Correct.
This is an example of active reconnaissance because it involves directly interacting with the company's systems to gather information.
- B. Correct.
This action is a form of passive reconnaissance because it involves gathering publicly available information without interacting with the company's systems.
- C. Correct.
Analyzing publicly available DNS and WHOIS data is a passive reconnaissance technique as it does not involve direct interaction with the company's systems.
- D. Incorrect.
Running automated penetration testing scripts is considered active reconnaissance or testing, but it does not specifically align with vulnerability identification or passive reconnaissance.
- E. Correct.
Reviewing publicly released information such as press releases is a passive reconnaissance technique since the information is obtained without directly interacting with the company's systems.