PEN-200 › Enumeration and Reconnaissance

Enumeration and Reconnaissance Practice Questions

This domain covers active and passive information gathering before exploitation: host discovery, port and service scanning with Nmap, DNS and infrastructure enumeration, and interpreting scan responses correctly. PEN-200 tests it through scenario questions where you must choose the right scan type or tool and infer host state from ICMP, TCP, and RST/ACK behavior.

Questions

Set types

Numbered sets

Practice by question count

questions

questions — timed

Numbered sets — 15 questions each

Set 1 Set 2

Complete question bank

PEN-200 Enumeration and Reconnaissance — All 41 Questions

Every question in this domain with answers and detailed explanations.

→

Other PEN-200 domains

Client-Side Attacks

Active Directory Attacks

Public Exploits

Web Application Attacks

Linux Privilege Escalation

Buffer Overflow Fundamentals

Port Redirection and Tunneling

Antivirus Evasion

Password Attacks

Windows Privilege Escalation

← PEN-200 Practice Test Hub