Reconnaissance and information gathering in Cybersecurity - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is reconnaissance in cybersecurity?

Reconnaissance is the process of collecting information about a target system or network to find ways to exploit it.

beginner

Name two types of reconnaissance.

The two main types are passive reconnaissance (gathering information without interacting directly with the target) and active reconnaissance (directly interacting with the target to collect data).

intermediate

What is the difference between passive and active reconnaissance?

Passive reconnaissance collects information without alerting the target, like searching public websites. Active reconnaissance involves direct interaction, such as scanning the target's network.

beginner

Give an example of a tool used for active reconnaissance.

Nmap is a popular tool used for active reconnaissance to scan networks and discover open ports and services.

beginner

Why is reconnaissance important in cybersecurity?

It helps identify vulnerabilities and weaknesses in a system before launching an attack or to strengthen defenses by understanding potential threats.

Which of the following is an example of passive reconnaissance?

A Port scanning a target network

B Searching public social media profiles

C Sending phishing emails

D Exploiting a vulnerability

Searching public social media profiles gathers information without interacting directly with the target, which is passive reconnaissance.

What does active reconnaissance usually involve?

A Listening to radio broadcasts

B Reading public documents

C Watching news about the target

D Scanning target systems for open ports

Active reconnaissance involves direct interaction like scanning systems to find open ports or services.

Which tool is commonly used for network scanning during reconnaissance?

A Nmap

B Photoshop

C Excel

D WordPress

Nmap is a well-known tool for scanning networks to discover open ports and services.

Why might an attacker perform reconnaissance before an attack?

A To install antivirus software

B To update their own system

C To find weaknesses to exploit

D To create a backup

Reconnaissance helps attackers find vulnerabilities to plan their attack effectively.

Which of these is NOT a goal of reconnaissance?

A Directly exploiting the system

B Identifying vulnerabilities

C Planning further attack steps

D Gathering information about the target

Reconnaissance is about gathering information, not directly exploiting the system.

Explain the difference between passive and active reconnaissance with examples.

Think about whether the target is aware of the information gathering.

Why is reconnaissance a critical step in cybersecurity attacks and defenses?

Consider both attacker and defender perspectives.