312-50V13 Question #313: Real Exam Question with Answer & Explanation

Question

You have been authorized to perform a penetration test against a website. You want to use Google dorks to footprint the site but only want results that show file extensions. What Google dork operator would you use?

Options

• Afiletype
• Bext
• Cinurl
• Dsite

Explanation

filetype is the correct Google dork operator because it specifically searches for and returns results containing particular file extensions (e.g., filetype:pdf or filetype:xls), making it ideal for footprinting a site to discover exposed sensitive files. ext (Option B) is a common distractor - while it functions similarly to filetype in some search engines, it is not the recognized standard Google dork operator tested on security exams like CEH. inurl (Option C) searches for specific keywords within a URL string, not file extensions, so it would return broader, less targeted results. site (Option D) restricts search results to a specific domain (e.g., site:example.com) but provides no filtering by file type or extension.

🧠 Memory Tip: Think of it literally - if you want to find file types, use filetype. The operator name directly describes its function, making it one of the easiest Google dork operators to remember.

No community discussion yet for this question.