M02 · Footprinting and Reconnaissance · Q&A

Check understanding with original scenarios and a reason for every option. These answers do not establish exam or practical readiness.

Scenario questions

ceh-m02-evidence-q1 · Original practice

Two names resolve to the same IP. What follows directly?

Two names resolve to the same IP. What follows directly? A. They must share an administratorB. Both are authorized test targetsC. Their addresses match in that observationD. They must run the same OS

Confidence

JavaScript is off: read the answer and explanation

Shared hosting can have different administrators.
Resolution data does not grant permission.
This is directly supported by the record.
An address does not establish a shared backend OS.

ceh-m02-evidence-q2 · Original practice

Which note is easiest to verify later?

Which note is easiest to verify later? A. Source, time, observation, inference and next checkB. Only “this host has a problem”C. Only an undated imageD. Treat a guess as a fact

Confidence

JavaScript is off: read the answer and explanation

These fields let another reader trace the evidence and reasoning.
The target and evidence are unspecified.
Time and context are missing.
Conflating facts and inferences compounds errors.

ceh-m02-evidence-q3 · Original practice

Does a CNAME alias automatically extend test scope?

Does a CNAME alias automatically extend test scope? A. Yes, because DNS is publicB. No; authorized assets and actions still need checkingC. Yes, if the names look relatedD. No, because DNS can never be read

Confidence

JavaScript is off: read the answer and explanation

Public visibility and authorization differ.
A technical relationship does not replace explicit scope.
Similar names are not authorization evidence.
The issue is scope, not a blanket ban on reading DNS.

Continue to safe practice →

CS Kairos Research and learning, built over time.

Teaching & main site Content principles GitHub