Comptia Pentest Certification Exam Pt0 002 : Practice Questions and Answers

WHOIS information about a domain includes technical and administrator contacts, providing key information about who is responsible for the domain and potential contacts for social engineering and OSINT activities.

A WHOIS query allows searching databases of registered users of domains and IP address blocks, providing useful information about an organization or individual based on their registration information.

The Internet Assigned Numbers Authority (IANA) manages the DNS root zone.

External footprinting in passive reconnaissance involves gathering information about the target from external sources, focusing on domains, IP ranges, and routes for the organization.

Information about an organization's technology stack can be found in certifications, job responsibilities, and technologies mentioned in social media profiles, résumés, job postings, and publications.

Social media platforms like LinkedIn and Facebook can be leveraged by scripting and searching profiles to identify employees.

The Internet Archive (https://archive.org) provides point-in-time snapshots of websites and other data, including information that may have been removed from the web.

Valuable metadata in common business files can include information such as authors, creation dates/times, and software versions.

FOCA is a metadata scanning tool that uses a search engine to gather metadata information from files like Microsoft Office documents, PDF files, and others.

ExifTool is designed to allow quick and easy viewing of document metadata during penetration testing.

Attackers seek to achieve the goals of destruction, alteration, and denial, as described by the DAD triad.

Cybersecurity professionals strive to protect the confidentiality, integrity, and availability of information and systems, as described by the CIA triad.

Adopting the hacker mindset in penetration testing helps identify weaknesses in the organization's security infrastructure.

CloudBrute is a scanner used to identify the cloud components used by an organization.

Cloud Custodian is a rule enforcement engine that allows the consistent application of security policies across cloud environments.

Pacu is a cloud exploitation framework focused on Amazon Web Services (AWS)-hosted environments.

ScoutSuite is a cloud security auditing tool that can work across commonly used cloud environments.