MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. Passive reconnaissance focuses on acquiring information about a target
   a. by directly sending queries to the target
   b. through public or indirect sources
   c. by exploiting vulnerabilities
   d. via brute force attacks
   Answer: b. through public or indirect sourcescymulate​
2. Which of the following is a passive reconnaissance method?
   a. Port scanning
   b. WHOIS lookup
   c. Vulnerability scanning
   d. TCP handshake
   Answer: b. WHOIS lookupsiberoloji​
3. Passive reconnaissance aims to
   a. Interact directly with the system
   b. Avoid detection by not engaging targets
   c. Exploit discovered vulnerabilities
   d. Install trojans
   Answer: b. Avoid detection by not engaging targetscycognito​
4. Which is considered an active reconnaissance technique?
   a. Port scanning
   b. OSINT searches
   c. DNS record lookup
   d. WHOIS query
   Answer: a. Port scanningfita​
5. A tool commonly used for passive packet analysis is
   a. Nmap
   b. Wireshark
   c. Hydra
   d. Nikto
   Answer: b. Wiresharktryhackme​
6. Data gathered through search engines using operators like “filetype:” or “site:” relates to
   a. DNS hijacking
   b. Search engine dorking
   c. Malware analysis
   d. SQL injection
   Answer: b. Search engine dorkingtryhackme​
7. What does passive reconnaissance primarily rely on?
   a. Open-source intelligence (OSINT)
   b. Brute force
   c. Man-in-the-middle attacks
   d. Exploit frameworks
   Answer: a. Open-source intelligence (OSINT)codecademy​
8. Which of the following is not a passive reconnaissance tool?
   a. Shodan
   b. Robtex
   c. Nmap
   d. Maltego
   Answer: c. Nmaplearningnetwork.cisco​
9. WHOIS data helps attackers identify
   a. Firewalls
   b. Domain registration details
   c. Software versions
   d. Encryption standards
   Answer: b. Domain registration detailssiberoloji​
10. Passive reconnaissance differs from active reconnaissance mainly in
    a. Speed
    b. Stealth
    c. Tools
    d. Hardware
    Answer: b. Stealthcycognito​
11. Which of these provides archive data for passive reconnaissance?
    a. GitHub
    b. Wayback Machine
    c. Router logs
    d. AWS CloudTrail
    Answer: b. Wayback Machinetryhackme​
12. Gathering employee data from LinkedIn is an example of
    a. OSINT
    b. Phishing
    c. Active footprinting
    d. Port scanning
    Answer: a. OSINTcodecademy​
13. A DNS query performed without sending packets directly to a target network is
    a. Active DNS probing
    b. Passive DNS reconnaissance
    c. Penetration testing
    d. Brute force attack
    Answer: b. Passive DNS reconnaissancesiberoloji​
14. Which of these is used for analyzing public social media connections during reconnaissance?
    a. Metasploit
    b. Maltego
    c. Aircrack-ng
    d. Burp Suite
    Answer: b. Maltegotryhackme​
15. TheHarvester primarily gathers
    a. Passwords from servers
    b. Email addresses
    c. Encryption keys
    d. Malware logs
    Answer: b. Email addressestryhackme​
16. Footprinting during the recon phase means
    a. Gaining access to the host
    b. Collecting network and organization information
    c. Exploiting discovered flaws
    d. Installing spyware
    Answer: b. Collecting network and organization informationjanbasktraining​
17. The greatest advantage of passive reconnaissance is
    a. Real-time monitoring
    b. Low risk of detection
    c. Accessing hidden networks
    d. Finding open ports
    Answer: b. Low risk of detectioncycognito​
18. Which record reveals an organization’s mail servers?
    a. NS record
    b. MX record
    c. TXT record
    d. A record
    Answer: b. MX recordsiberoloji​
19. The term for exploring old web content is
    a. Phishing
    b. Doxing
    c. Archival research
    d. Data replication
    Answer: c. Archival researchtryhackme​
20. Passive reconnaissance is also known as
    a. Information exploitation
    b. Indirect intelligence gathering
    c. Live probing
    d. Brute force discovery
    Answer: b. Indirect intelligence gatheringtechtarget​
21. Which of the following is true about passive reconnaissance?
    a. It alters target systems
    b. It uses only network-based methods
    c. It observes without interaction
    d. It transmits crafted packets
    Answer: c. It observes without interactioncycognito​
22. Robtex is used to gather information such as
    a. Password hashes
    b. DNS and IP data
    c. SSH keys
    d. Malware indicators
    Answer: b. DNS and IP datatryhackme​
23. A key limitation of passive reconnaissance is
    a. Difficulty of stealth
    b. Limited technical detail
    c. Legal risk
    d. Dependence on malware
    Answer: b. Limited technical detailcymulate​
24. DNS NS records provide
    a. Host aliases
    b. Mail servers
    c. Authoritative name servers
    d. Firewall configurations
    Answer: c. Authoritative name serverssiberoloji​
25. Collecting business data from registries or press releases belongs to
    a. Social engineering
    b. Public record mining
    c. Exploit development
    d. Scanning
    Answer: b. Public record miningsiberoloji​
26. OSINT data sources include
    a. Dark web only
    b. Public web, social media, and registries
    c. Only corporate VPNs
    d. Malware aggregators
    Answer: b. Public web, social media, and registriescodecademy​
27. Passive reconnaissance assists in discovering
    a. Security misconfigurations via exploit testing
    b. Publicly visible infrastructure metadata
    c. Zero-day vulnerabilities
    d. Spoofing methods
    Answer: b. Publicly visible infrastructure metadatasiberoloji​
28. A domain’s SPF information can be found in
    a. MX record
    b. TXT record
    c. CNAME record
    d. NS record
    Answer: b. TXT recordsiberoloji​
29. Google Hacking Database is associated with
    a. Brute force
    b. Search engine dorking
    c. SQL injection
    d. DNS poisoning
    Answer: b. Search engine dorkingtryhackme​
30. Reading cached page versions counts as
    a. Data exploitation
    b. Passive caching analysis
    c. Passive recon activity
    d. Vulnerability scanning
    Answer: c. Passive recon activitysiberoloji​
31. Passive reconnaissance does not involve
    a. OSINT
    b. Job posting research
    c. Packet sniffing
    d. Port scanning
    Answer: d. Port scanningvinsys​
32. Certificate transparency logs are useful for
    a. Finding hidden subdomains
    b. Brute forcing login pages
    c. SQL injection
    d. Credential reuse
    Answer: a. Finding hidden subdomainscymulate​
33. In reconnaissance, “footprinting” refers to
    a. Identifying software and hardware setups
    b. Deploying malware
    c. Exploiting open ports
    d. Modifying DNS records
    Answer: a. Identifying software and hardware setupscodecademy​
34. Reconnaissance can be
    a. Only passive
    b. Passive or active
    c. Only active
    d. Steganographic
    Answer: b. Passive or activesanfoundry​
35. DNS lookup tools used in passive recon include
    a. netcat
    b. dig
    c. hydra
    d. nmap
    Answer: b. digsiberoloji​
36. What key ethical advantage does passive recon have?
    a. Avoids intrusion by using only public info
    b. Requires target permission
    c. Creates fake credentials
    d. Uses exploit payloads
    Answer: a. Avoids intrusion by using only public infosiberoloji​
37. A social engineer browsing job postings to infer software usage performs
    a. OSINT-based passive recon
    b. Exploitation attempt
    c. Phishing attack
    d. Active scanning
    Answer: a. OSINT-based passive reconcodecademy​
38. Passive reconnaissance output can aid in
    a. Attack planning
    b. Encryption
    c. System patching
    d. Malware removal
    Answer: a. Attack planningcymulate​
39. OSINT can reveal
    a. Private network configs
    b. Publicly listed infrastructure and personnel details
    c. Exploit payloads
    d. Firewall bypass methods
    Answer: b. Publicly listed infrastructure and personnel detailscymulate​
40. DNS A record reveals
    a. IP address mapping for hostname
    b. Mail host
    c. Name server info
    d. Security policies
    Answer: a. IP address mapping for hostnamesiberoloji​
41. Which layer of attack methodology does passive recon belong to?
    a. Post-exploitation
    b. Initial information gathering
    c. Vulnerability scanning
    d. Maintaining access
    Answer: b. Initial information gatheringjanbasktraining​
42. Sniffing network traffic without injecting packets is
    a. Active scanning
    b. Passive monitoring
    c. Exploitation
    d. DoS attack
    Answer: b. Passive monitoringvinsys​
43. The main goal of passive reconnaissance is to
    a. Build a detailed target profile safely
    b. Bypass firewalls directly
    c. Infect with malware
    d. Escalate privileges
    Answer: a. Build a detailed target profile safelycycognito​
44. Passive reconnaissance is often used before
    a. Exploitation
    b. Malware removal
    c. Patching
    d. Password cracking
    Answer: a. Exploitationcymulate​
45. Searching subdomains via public DNS repositories is part of
    a. Banner grabbing
    b. Passive DNS enumeration
    c. Firewall analysis
    d. Exploit framework usage
    Answer: b. Passive DNS enumerationsiberoloji​
46. Google Dorks aid attackers by
    a. Accessing hidden file listings
    b. Encrypting systems
    c. Executing code remotely
    d. Detecting antivirus
    Answer: a. Accessing hidden file listingstryhackme​
47. Passive reconnaissance often forms the basis for
    a. Social engineering
    b. Malware deployment
    c. Exploit writing
    d. Brute force attacks
    Answer: a. Social engineeringjanbasktraining​
48. Which of these tools scans WHOIS and DNS data?
    a. theHarvester
    b. Hydra
    c. Aircrack
    d. Metasploit
    Answer: a. theHarvestertryhackme​
49. Passive reconnaissance legality depends on
    a. Using only public sources
    b. Exploiting vulnerabilities
    c. Bypassing firewalls
    d. Scanning host ports
    Answer: a. Using only public sourcessiberoloji​
50. The final result of passive reconnaissance typically includes
    a. A map of public information
    b. Exploitation scripts
    c. Compromised servers
    d. Malicious payloads
    Answer: a. A map of public informationcymulate​

1. https://cymulate.com/cybersecurity-glossary/cyber-reconnaissance/
2. https://www.siberoloji.com/passive-reconnaissance-techniques-tools-and-methods/
3. https://www.cycognito.com/learn/exposure-management/active-vs-passive-reconnaissance.php
4. https://www.fita.in/ultimate-guide-to-tools-and-techniques-of-reconnaissance-in-ethical-hacking/
5. https://tryhackme.com/resources/blog/active-passive-reconnaissance-techniques
6. https://www.codecademy.com/article/passive-active-reconnaissance
7. https://learningnetwork.cisco.com/s/question/0D5Kd0000BkhyrTKQQ/16-cyberops-associatelevel-multiplechoice-questions-mcqswhich-of-these-is-a-passive-reconnaissance-toola-nmapb-shodanc-metasploitd-john-the-ripper
8. https://www.janbasktraining.com/interview-questions/cybersecurity-ceh-reconnaissance/
9. https://www.techtarget.com/whatis/definition/passive-reconnaissance
10. https://www.vinsys.com/blog/top-30-mcqs-ceh-exam-preparation
11. https://www.sanfoundry.com/cyber-security-questions-answers-generic-steps-security-1/
12. https://www.yeahhub.com/cyber-security-ethical-hacking-mcq-questions-answers-part1/
13. https://www.scribd.com/document/524434738/mcq-questions-on-cyber-security
14. https://www.placementpreparation.io/mcq/ethical-hacking/
15. https://itexamanswers.net/3-5-3-quiz-information-gathering-and-vulnerability-scanning-answers.html
16. https://www.ccslearningacademy.com/what-is-reconnaissance-in-cyber-security/
17. https://www.sanfoundry.com/1000-cyber-security-questions-answers/
18. https://www.esecurityplanet.com/threats/how-hackers-use-reconnaissance/
19. https://www.imperva.com/learn/data-security/cybersecurity-reconnaissance/
20. https://www.sciencedirect.com/topics/computer-science/passive-reconnaissance