As a security analyst you setup a false survey website that will reQuire users to create a username and a strong password. You send the link to all the employees of the company. What information…

The correct answer is C. The employees network usernames and passwords. This is a classic credential harvesting / password reuse awareness test. By requiring employees to create an account on a fake site, the security analyst collects the usernames and passwords they choose. Because many users reuse the same credentials across multiple systems, the…

Submitted by naveen.iyer· Apr 18, 2026Network Forensics

Question

As a security analyst you setup a false survey website that will reQuire users to create a username and a strong password. You send the link to all the employees of the company. What information will you be able to gather?

Options

AThe IP address of the employees computers
BBank account numbers and the corresponding routing numbers
CThe employees network usernames and passwords
DThe MAC address of theemployees?computers

How the community answered

(32 responses)

A
3% (1)
B
3% (1)
C
88% (28)
D
6% (2)

Explanation

This is a classic credential harvesting / password reuse awareness test. By requiring employees to create an account on a fake site, the security analyst collects the usernames and passwords they choose. Because many users reuse the same credentials across multiple systems, the analyst can compare submitted credentials against corporate login data to identify employees practicing poor password hygiene. The test does not capture MAC addresses (Layer 2, not exposed to web servers) or bank account numbers. IP addresses (choice A) are collectable but are not the primary goal or the most sensitive information gathered.

Topics

#Phishing#Credential Harvesting#Social Engineering#Information Gathering

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice