Study. uk . com
  1. Home
  2. All questions
  3. Question 375

CISSP study material · question 375 of 500

An external test begins before any scanning takes place. Which three sources does SP 800-115 describe reconnaissance drawing on? Choose three.

  1. Public postings such as newsgroups.
  2. Internal asset inventories provided by the client.
  3. Name server information.
  4. Public registration data.
Show the answer

Answer: C. Name server information.
A. Public postings such as newsgroups.
D. Public registration data.

External testing often begins with reconnaissance searching public registration data, domain name system server information, newsgroup postings and other publicly available information.

Source: NIST SP 800-115 (NIST) — SP 800-115 > 2.4.1 External and Internal

Challenge yourself on this topic → Study as cards