A penetration tester is tasked with gathering information about the subdomains of a target organization's website. The tester needs a versatile and efficient solution for the task. Which of the…

Question

Options

• AEmploying a tool like Sublist3r, which is designed to enumerate the subdomains of websites using
• BAnalyzing Linkedin profiles to find employees of the target company and their job titles
• CUtilizing the Harvester tool to extract email addresses related to the target domain using a search
• DUsing a people search service, such as Spokeo or Intelius, to gather information about the

• A
  89% (54)
• B
  7% (4)
• C
  2% (1)
• D
  3% (2)

Explanation

Explanation

Sublist3r (Option A) is the most effective method because it is a purpose-built Python tool specifically designed to enumerate subdomains using multiple search engines (Google, Bing, Yahoo, etc.) and services like VirusTotal and DNSdumpster, making it the most direct and efficient solution for subdomain discovery.

Option B is incorrect because analyzing LinkedIn profiles focuses on gathering employee and organizational intelligence (OSINT), not technical subdomain enumeration - it would not reveal subdomain infrastructure.

Option C is incorrect because while theHarvester is a useful reconnaissance tool, it is primarily designed for harvesting email addresses, employee names, and hosts, rather than specifically targeting subdomain enumeration with the same depth as Sublist3r.

Option D is incorrect because people search services like Spokeo or Intelius are designed for personal/individual information gathering and have no capability to enumerate technical web infrastructure like subdomains.

Memory Tip: Think "Sublist3r = Subdomains"** - the name literally contains the task! When an exam question mentions subdomain enumeration, look for dedicated subdomain tools rather than general OSINT or people-search tools, which operate at the human/identity layer rather than the technical/DNS layer.

No community discussion yet for this question.