PT0-002 · Question #358
During passive reconnaissance of a target organization's infrastructure, a penetration tester wants to identify key contacts and job responsibilities within the company. Which of the following…
The correct answer is A. Social media scraping. Social media scraping is the most effective passive reconnaissance technique to identify key contacts and their job responsibilities within a target organization.
Question
During passive reconnaissance of a target organization's infrastructure, a penetration tester wants to identify key contacts and job responsibilities within the company. Which of the following techniques would be the most effective for this situation?
Options
- ASocial media scraping
- BWebsite archive and caching
- CDNS lookup
- DFile metadata analysis
How the community answered
(57 responses)- A72% (41)
- B5% (3)
- C16% (9)
- D7% (4)
Why each option
Social media scraping is the most effective passive reconnaissance technique to identify key contacts and their job responsibilities within a target organization.
Social media platforms like LinkedIn, Facebook, and Twitter are rich sources of publicly available information about employees, their roles, connections, and even interests. Scraping or manually reviewing these platforms during passive reconnaissance allows a tester to gather intelligence on key personnel, organizational structure, and potential social engineering targets without direct interaction.
Website archive and caching primarily reveal historical website content, which might contain old contact info but is less effective for current key contacts and responsibilities.
DNS lookups primarily reveal domain registration details and network infrastructure, not detailed information about individual employees and their job responsibilities.
File metadata analysis can reveal information about the creator or last modifier of a document, but it's often limited to specific files and less comprehensive for identifying key contacts across an organization.
Concept tested: Passive reconnaissance for personnel information
Topics
Community Discussion
No community discussion yet for this question.