Analyze the command output below. What information can the tester infer directly from the Information shown?

Question

Exhibit

Options

• AUsernames for the domain tesrdomain.com
• BDirectory indexing is allowed on the web server
• CVulnerable versions of Adobe software in use
• DNaming convention for public documents

• A
  6% (1)
• B
  6% (1)
• C
  12% (2)
• D
  76% (13)

Explanation

Without seeing the screenshot, this question tests a key OSINT/reconnaissance concept: when command output (typically from a Google dork, directory listing query, or metadata extraction tool) reveals a list of publicly accessible document filenames, a tester can directly infer the organization's document naming convention (e.g., 'CompanyName_Department_Year_DocType.pdf'). This is directly observable from the filenames shown. Usernames (A) would require additional metadata or directory enumeration. Directory indexing (B) requires seeing an actual HTTP directory listing page with a 'Parent Directory' link. Vulnerable Adobe versions (C) require metadata extraction (e.g., exiftool), not just filenames. Only the naming pattern (D) is directly readable from document names in the output.

No community discussion yet for this question.