Vulnerability Assessments Chapter 5
Exam Actual Questions and Answers
2026
Xavier is doing reconnaissance using a tool that pulls information
from social media postings that were made using location services.
He is gathering information about a company and its employees by
going through their social media content.
What tool is MOST likely being used? -
correct answer ✅Echosec
What information will be returned from the following Google
search? -
correct answer ✅Excel documents with the word "password" in
the title, but not from .gov and .gov.uk websites.
A network security engineer provided a report to the operations
manager with a large amount of public information that is
accessible solely from the company's website.
For example, the report shows email addresses and other company
phone numbers on a graph that would otherwise be known
internally.
,Vulnerability Assessments Chapter 5
Exam Actual Questions and Answers
2026
What tool did the network security engineer most likely use to
gather this information with little effort? -
correct answer ✅Maltego
When performing an authorized security audit of a website, you are
given only the website address and asked to find other hosts on
that network that might be vulnerable to attack.
Which of the following tools might be used to lead you to the
following Nmap output? (Select two.) -
correct answer ✅- whois.org
- nslookup
A company has hired a security analyst to perform a comprehensive
information gathering and reconnaissance phase of a penetration
testing engagement.
The analyst needs to use a tool that can automate gathering
information about a target and performing reconnaissance on the
target network.
, Vulnerability Assessments Chapter 5
Exam Actual Questions and Answers
2026
Which of the following tools is best suited for this task? -
correct answer ✅Recon-ng
A network administrator is using Nmap to scan a target host for
open ports.
Which Nmap scan type is known for being a fast and stealthy
technique? -
correct answer ✅TCP SYN
Iggy, a penetration tester, is conducting an unknown penetration
test. She wants to do reconnaissance by gathering information
about ownership, IP addresses, domain name, locations, and server
types.
Which of the following tools would be MOST helpful? -
correct answer ✅Whois
An attacker needs the following information about his target:
domain ownership, domain names, IP addresses, and server types.
Exam Actual Questions and Answers
2026
Xavier is doing reconnaissance using a tool that pulls information
from social media postings that were made using location services.
He is gathering information about a company and its employees by
going through their social media content.
What tool is MOST likely being used? -
correct answer ✅Echosec
What information will be returned from the following Google
search? -
correct answer ✅Excel documents with the word "password" in
the title, but not from .gov and .gov.uk websites.
A network security engineer provided a report to the operations
manager with a large amount of public information that is
accessible solely from the company's website.
For example, the report shows email addresses and other company
phone numbers on a graph that would otherwise be known
internally.
,Vulnerability Assessments Chapter 5
Exam Actual Questions and Answers
2026
What tool did the network security engineer most likely use to
gather this information with little effort? -
correct answer ✅Maltego
When performing an authorized security audit of a website, you are
given only the website address and asked to find other hosts on
that network that might be vulnerable to attack.
Which of the following tools might be used to lead you to the
following Nmap output? (Select two.) -
correct answer ✅- whois.org
- nslookup
A company has hired a security analyst to perform a comprehensive
information gathering and reconnaissance phase of a penetration
testing engagement.
The analyst needs to use a tool that can automate gathering
information about a target and performing reconnaissance on the
target network.
, Vulnerability Assessments Chapter 5
Exam Actual Questions and Answers
2026
Which of the following tools is best suited for this task? -
correct answer ✅Recon-ng
A network administrator is using Nmap to scan a target host for
open ports.
Which Nmap scan type is known for being a fast and stealthy
technique? -
correct answer ✅TCP SYN
Iggy, a penetration tester, is conducting an unknown penetration
test. She wants to do reconnaissance by gathering information
about ownership, IP addresses, domain name, locations, and server
types.
Which of the following tools would be MOST helpful? -
correct answer ✅Whois
An attacker needs the following information about his target:
domain ownership, domain names, IP addresses, and server types.
