Reference no: EM133258458

Question: Using the high-level network diagram of the university's systems and security infrastructure given in the provided illustration sheet titled "Information Gathering Plan," discuss a plan to gather information about the university's systems.

Aims Higher College Network Architecture

Phases and Activities

Gather information
Review Web site
Review company financials and other public reports
Identify employees, open positions, and resumes
Identify technology and software used by the organization
Search for employee forums, blogs, or other postings
Use Google searches to identify exposed information
Determining the network range
DNS lookup / WHOIS
ARIN lookup
Identifying active machines
Ping or port scan
Detecting operating systems
Mapping the network
Trace route and map systems
Look for network design documents or published information.

Consider the following questions:
• How would you determine the university's Internet Protocol (IP) address range?
• What information can you retrieve from the Domain Name System (DNS)?
• How would you footprint the network?
• What information would you want to gather from systems, and how would you gather it?
• What role would social engineering play in your information-gathering process?
• What information would be publicly published, and what would be worth collecting?
• What challenges might you encounter in your scans?
• What data might be missing, and why?