Part of that reconnaissance is running vulnerability testing suites. I think that they will give a quicker answer to most of the questions than having to read t

Part of that reconnaissance is running vulnerability testing suites. I think that they will give a quicker answer to most of the questions than having to read through the configuration code and piecing it together. Often I myself even prefer running nmap instead of looking at the code to check some configuration.