1. Alice is performing a penetration test for a client. What is the first step t
1. Alice is performing a penetration test for a client. What is the first step that Alice will take?
A. SQL injection
B. Dos Attack
C. OS Detection
D. Whois
2. James has been asked by the client to check the digital footprint of the company. What sort of footprinting should James do?
A. Conversation with employee
B. Whois Footprinting
C. Network Footprinting
D. Footprinting using search engines
3. James suggested his friend Alice to use Maltego for footprinting. But Alice was hesitant to use Maltego as it does not provide information about______
A. Firewalls, IP addresses & Network maps
B. Person’s Identity
C. Website archives
D. DNS
4. Which tool in the industry is used to find out the open ports of a system?
A. Burp Suite
B. Maltego
C. Nmap
D. Aircrack
5. Which flag is NOT used in UDP based network Scanning?
A. FIN
B. ACK
C. RST
D. All the Above
6. Analysing the content of the received packet from the target is known as ______
A. Packet Play
B. Packet editing
C. Packet crafting
D. Packet decoding
7. Which Protocol can be used to perform a ping sweep?
A. SSH
B. FTP
C. ICMP
D. HTTPs
8. Which command is used to find out open ports as well as packages installed on that port?
A. Nmap -sS
B. Nmap -sI
C.Nmap -sW
D.Nmap -sV
9. Which Flag is NOT used in a Three-way handshake?
A. SYN
B. ACK
C. FIN
D. PUSH
Assignment 9 Enumeration
1. Which tool cannot be used for enumeration?
A. Burp Suite
B. Proxy chains
C. GoBuster
D. DirBuster
2. What are the default values of community strings in SNMP?
A. Secret/Public
B. Private/Everyone
C. Private/Public
D. None
3. What information an attacker CANNOT find by NTP enumeration?
A.Passwords of the connected user
B. No. of hosts connected to NTP server
C. Operating system of all the users
D. None of the above
4. What are the port numbers of SSH, FTP, HTTP, DNS & HTTPS?
A. 53, 21, 80, 22 & 443
B. 21, 53, 443, 22 & 80
C. 22, 21, 80, 53 & 443
D. 21, 22, 53, 80 & 443
5. Which command is used to find whether a user is registered on an SMTP server?
A. HELO
B. VRFY
C. ACK
D. SYN
6. Alice got a new CCTV camera set at home. Operator setup the camera with default credentials. One day she got to know that her neighbor has access to the camera. What type of loophole was there in the camera?
A. Vulnerability
B. Misconfiguration
C. Open Services
D. OS Flaws
