CompTIA PenTest+ Practice Test

Which tool would you use to collect information on network services and configurations?

1. Wireshark

2. theHarvester

3. Nessus

4. Metagoofil

The correct answer is: theHarvester

The choice of tool to collect information on network services and configurations is theharvester. This tool is primarily used for gathering and aggregating publicly available information related to domains, email addresses, and hosts. It can be particularly effective for reconnaissance by enabling penetration testers to gather valuable data that can help assess the attack surface of a target organization. In the context of network services and configurations, theharvester helps identify various details that are essential during the reconnaissance phase of a penetration test. By querying search engines and social media platforms, it can uncover configuration information, open ports, and potential vulnerabilities associated with network services. While Wireshark is a powerful network protocol analyzer that captures and inspects packet data flowing through the network, it is primarily focused on traffic analysis rather than initial service enumeration. Nessus, on the other hand, is a vulnerability scanner that helps identify vulnerabilities on systems, but it is not dedicated solely to gathering information on services/configurations. Lastly, Metagoofil is a tool used for extracting information from public documents, which can help in gathering metadata but does not focus specifically on gathering network service configurations. Therefore, theharvester is the most suitable tool for the targeted purpose of collecting information on network services and configurations.