Reconnaissance in Pentesting

Question 1

What is Reconnaissance?

Answer 1

Initial phase where an attacker gathers information about the target system

Question 2

What is Active Reconnaissance?

Answer 2

Engaging with the target system directly, such as scanning for open ports using tools like Nmap

Question 3

What is Passive Reconnaissance?

Answer 3

Gathering information without direct engagement, like using open-source intelligence or WHOIS to collect data

Question 4

What happens in Known Environment Tests?

Answer 4

Penetration testers have detailed information about the target before the test begins

Question 5

What happens in Partially Known Environments Tests?

Answer 5

Testers have limited information about the target, simulating a scenario where an attacker has partial inside knowledge

Question 6

What happens in Unkown Environments Tests?

Answer 6

Simulates a real-world external attacker aiming to find entry points and vulnerabilities