EC-Council
EC0-350 · Question #278
A penetration tester was hired to perform a penetration test for a bank. The tester began searching for IP ranges owned by the bank, performing lookups on the bank's DNS servers, reading news…
The correct answer is D. Passive information gathering. See the full explanation below for the reasoning.
Question
A penetration tester was hired to perform a penetration test for a bank. The tester began searching for IP ranges owned by the bank, performing lookups on the bank's DNS servers, reading news articles online about the bank, watching what times the bank employees come into work and leave from work, searching the bank's job postings (paying special attention to IT related jobs), and visiting the local dumpster for the bank's corporate office. What phase of the penetration test is the tester currently in?
Options
- AInformation reporting
- BVulnerability assessment
- CActive information gathering
- DPassive information gathering
How the community answered
(27 responses)- A15% (4)
- B7% (2)
- C7% (2)
- D70% (19)
Community Discussion
No community discussion yet for this question.