ExamGecko
Question list
Search
Search

Question 39 - Cybersecurity Audit discussion

Report
Export

Which of the following is a passive activity that could be used by an attacker during reconnaissance to gather information about an organization?

A.
Using open source discovery
Answers
A.
Using open source discovery
B.
Scanning the network perimeter
Answers
B.
Scanning the network perimeter
C.
Social engineering
Answers
C.
Social engineering
D.
Crafting counterfeit websites
Answers
D.
Crafting counterfeit websites
Suggested answer: A

Explanation:

A passive activity that could be used by an attacker during reconnaissance to gather information about an organization is using open source discovery. This is because open source discovery is a technique that involves collecting and analyzing publicly available information about an organization, such as its website, social media, press releases, annual reports, etc. Open source discovery does not require any direct interaction or communication with the target organization or its systems or network, and therefore does not generate any traffic or alerts that could be detected by the organization's security controls. The other options are not passive activities that could be used by an attacker during reconnaissance to gather information about an organization, but rather active activities that involve direct or indirect interaction or communication with the target organization or its systems or network, such as scanning the network perimeter (B), social engineering C, or crafting counterfeit websites (D).

asked 18/09/2024
Arun Lailamony
38 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first