A penetration tester is utilizing social media to gather information about employees at a company. The tester has created a list of popular words used in employee profiles. For which of the…

Exploit chaining involves combining multiple vulnerabilities to achieve a more significant impact and is unrelated to gathering common words for password guessing.

Session hijacking is the act of taking over an authenticated user's session and does not involve the use of popular words from social media profiles.

When a penetration tester compiles a list of popular words from employee social media profiles, this information is used to create a custom dictionary. This dictionary then serves as a basis for a dictionary attack, where these likely passwords are systematically attempted against target accounts.

The term 'Karma' refers to a type of wireless attack that tricks clients into connecting to a rogue access point, which is not applicable to using word lists for password attacks.