Ethical Hacking Zero to Hero Practice Test 2026 | Exam Prep

During the reconnaissance phase, an ethical hacker discovers that a target organization uses a legacy Teleret system for internal communications. Which active reconnaissance technique would be MOST effective for gathering information about this specific service without triggering immediate alarms?

In the context of maintaining persistence after initial compromise, which method is generally considered the MOST stealthy for a Linux server, assuming the attacker has gained root privileges?

An attacker has successfully exploited a web application vulnerability and wishes to pivot to the internal, non-routable network (172.16.0.0/16). The compromised host has two network interfaces. Which technique would establish the most reliable pivot for conducting further attacks on the internal segment?