Hands-On Ethical Hacking and Network Defense, 3e, ISBN 9781285454610
Ch. 4 Solutions-1
Chapter 4 Solutions
Review Questions
1. Which of the following is a fast and easy way to gather information about a company?
(Choose all that apply.)
2. To find information about the key IT personnel for a company’s domain, you might use
which of the following tools? (Choose all that apply.)
3. _____ is one of the components most vulnerable to network attacks.
4. Which of the following contains host records for a domain?
5. Which of the following is a good Web site for gathering information on a domain?
6. A cookie can store information about a Web site’s visitors. True or False?
7. Which of the following enables you to view all host computers on a network?
8. What’s one way to gather information about a domain?
9. Which of the following is one method of gathering information about the operating
systems a company is using?
10. To determine a company’s primary DNS server, you can look for a DNS server
containing which of the following?
11. When conducting competitive intelligence, which of the following is a good way to
determine the size of a company’s IT support staff?
12. If you’re trying to find newsgroup postings by IT employees of a certain company, which
of the following Web sites should you visit?
13. Which of the following tools can assist you in finding general information about an
organization and its employees? (Choose all that apply.)
Hands-On Ethical Hacking and Network Defense, 3e, ISBN 9781285454610
Ch. 4 Solutions-2
14. What’s the first method a security tester should attempt to find a password for a computer
on the network?
15. Many social engineers begin gathering the information they need by using which of the
following?
16. Discovering a user’s password by observing the keys he or she presses is called which of
the following?
17. Shoulder surfers can use their skills to find which of the following pieces of information?
18. Entering a company’s restricted area by following closely behind an authorized person is
referred to as which of the following?
19. What social-engineering technique involves telling an employee that you’re calling from
the CEO’s office and need certain information ASAP? (Choose all that apply.)
20. Before conducting a security test by using social-engineering tactics, what should you
do?
Activities
Activity 4-2
Activity 4-3
Activity 4-4
Step 4: Answers will vary. Students should look for any information in the cookie that identifies
Case Projects
Case Project 4-1: Using an E-mail Address to Determine a Network’s
Operating System
2: Students should have determined that Christy Fitzgerald is using RHEL 5.8.
3: Students should performs some research using the CVE websites mentioned earlier to discover
vulnerabilities in Red Hat Enterprise Linux 5.8.
Students’ memos should discuss the risks of IT personnel posting to newsgroups / help sites and
suggest that e-mail accounts linking employees with the company not be used (A Gmail address
Case Project 4-2: Using Dumpster-Diving Skills
There are no right or wrong answers, but the report should mention the significance of the OS
training kit and the Oracle and SQL Server references. The memos can be used to obtain personnel