Question 1

Reconnaissance is not by definition illegal, and many reconnaissance techniques are completely legal.

Accepted Answer

Reconnaissance, in the context of cybersecurity and information gathering, can involve techniques that are legal, such as public information gathering, social engineering, and network scanning with permission. The legality depends on the methods used and whether they infringe on privacy or unauthorized access laws.

Question 2

The strongest link in any security scheme is the user.

Accepted Answer

The user is often considered the weakest link in any security scheme due to human error and susceptibility to social engineering attacks.

Question 3

Most social engineering attacks are opportunistic: the hacker uses whatever technique he or she thinks fits the situation.

Accepted Answer

Social engineering attacks often rely on the opportunity presented by a situation, with the attacker adapting their technique to exploit the vulnerabilities of the target or the environment they are in.

Question 4

Breaking CD-ROMs is sufficient to destroy their data, as data cannot be recovered from broken disks.

Accepted Answer

Data on broken CD-ROMs can sometimes be partially recovered using specialized techniques, so breaking them is not a guaranteed method to destroy the data completely.

Question 5

____ uses influence and persuasion to deceive people by convincing them that the social engineer is someone he isn't, or by manipulation.&#10;A)Network enumeration&#10;B)Network penetration&#10;C)Social enumeration&#10;D)Social engineering

Accepted Answer

Social engineering uses influence and persuasion to deceive people, often by convincing them that the social engineer is someone they are not, or by manipulating them into divulging confidential information.

Question 6

____ is a method of achieving access to information by actually joining the organization as an employee or a consultant.&#10;A)Deception&#10;B)Bribery&#10;C)Impersonation&#10;D)Conformity

Accepted Answer

Deception is the correct answer because it involves tricking an organization into believing that the individual seeking access is legitimately joining as an employee or consultant, when in fact their motive is to gain access to information.

Question 7

With ____, a user is tricked into giving private information about his or her account with a known large organization.&#10;A)conformity&#10;B)phishing&#10;C)deception&#10;D)pharming

Accepted Answer

Phishing involves tricking individuals into divulging sensitive information, such as login credentials or financial information, by pretending to be a trustworthy entity in electronic communications.

Question 8

Newsgroups are part of an online bulletin board system called ____, which contains groups covering a huge variety of subjects.&#10;A)GROUPS&#10;B)ARPANET&#10;C)USENET&#10;D)NEWSNET

Accepted Answer

USENET is the correct answer because it is a global, decentralized network of discussion groups, known as newsgroups, covering a wide array of subjects.

Question 9

____ is an Internet tool that aids in retrieving domain name-specific information from the NSI Registrar database.&#10;A)WHOIS&#10;B)Locate&#10;C)DNS&#10;D)Whereis

Accepted Answer

WHOIS is a query and response protocol that is widely used for querying databases that store the registered users or assignees of an Internet resource, such as a domain name, an IP address block, or an autonomous system, but is also used for a wider range of other information.

Question 10

____________________ is the act of locating targets and developing the methods necessary to attack those targets successfully.

Accepted Answer

The answer of ____________________ is the act of locating targets...

Question 11

____________________ is the process of identifying domain names as well as other resources on the target network.

Accepted Answer

The answer of ____________________ is the process of identifying domain...

Question 12

____________________ is a DNS feature that lets a DNS server update its database with the list of domain names in another DNS server.

Accepted Answer

The answer of ____________________ is a DNS feature that lets...

Question 13

There are two ping utilities available for a Linux or Unix machine: ping and ____________________.

Accepted Answer

The answer of There are two ping utilities available for...

Question 14

The Linux command ____________________ shows you where the files appear in your PATH.

Accepted Answer

The answer of The Linux command ____________________ shows you where...

Question 15

Describe some legal reconnaissance activities.

Accepted Answer

The answer of Describe some legal reconnaissance activities....

Question 16

Describe some illegal reconnaissance activities.

Accepted Answer

The answer of Describe some illegal reconnaissance activities....

Question 17

Describe conformity as a social engineering technique.

Accepted Answer

The answer of Describe conformity as a social engineering technique....

Deck 2: Reconnaissance