IT Exam Items Repository

Last Updated: Jun 24, 2026
IT Exam Items Repository › Category: Ethical Hacker
What initial information can be obtained when performing user enumeration in a penetration test?
ITExamAnswers Editorial Team asked 3 years ago • 
How is open-source intelligence (OSINT) gathering typically implemented during a penetration test?
ITExamAnswers Editorial Team asked 3 years ago • 
A threat actor is looking at the IT and technical job postings of a target organization. What would be the most beneficial information to capture from these postings?
ITExamAnswers Editorial Team asked 3 years ago • 
What is the purpose of applying the Common Vulnerability Scoring System (CVSS) to a vulnerability detected by a penetration test?
ITExamAnswers Editorial Team asked 3 years ago • 
Why is the Common Vulnerabilities and Exposures (CVE) resource useful when investigating vulnerabilities detected by a penetration test?
ITExamAnswers Editorial Team asked 3 years ago • 
When a penetration test identifies a vulnerability, how should the vulnerability be further verified?
ITExamAnswers Editorial Team asked 3 years ago • 
What is the disadvantage of running a TCP Connect scan compared to running a TCP SYN scan during a penetration test?
ITExamAnswers Editorial Team asked 3 years ago • 
What can be deduced when a tester enters the nmap -sF command to perform a TCP FIN scan and the target host port does not respond?
ITExamAnswers Editorial Team asked 3 years ago • 
What is the purpose of host enumeration when beginning a penetration test?
ITExamAnswers Editorial Team asked 3 years ago • 
Why would a penetration tester use the nmap -sF command?
ITExamAnswers Editorial Team asked 3 years ago • 
In which circumstance would a penetration tester perform an unauthenticated scan of a target?
ITExamAnswers Editorial Team asked 3 years ago • 
What is required for a penetration tester to conduct a comprehensive authenticated scan against a Linux host?
ITExamAnswers Editorial Team asked 3 years ago • 
What is the disadvantage of conducting an unauthenticated scan of a target when performing a penetration test?
ITExamAnswers Editorial Team asked 3 years ago • 
What type of server is a penetration tester enumerating when they enter the nmap -sU command?
ITExamAnswers Editorial Team asked 3 years ago • 
Why would a penetration tester perform a passive reconnaissance scan instead of an active one?
ITExamAnswers Editorial Team asked 3 years ago • 
« Previous1…34567…21Next »
Ask Question

About The Author

ITExam Editorial Team

The ITExamAnswers Editorial Team is a dedicated group of certified IT professionals and network engineers. We rigorously review, verify, and update all exam materials to ensure you receive the most accurate and reliable resources for your certification journey.