nerdexam
CompTIA

PT0-002 · Question #358

During passive reconnaissance of a target organization's infrastructure, a penetration tester wants to identify key contacts and job responsibilities within the company. Which of the following…

The correct answer is A. Social media scraping. Social media scraping is the most effective passive reconnaissance technique to identify key contacts and their job responsibilities within a target organization.

Reconnaissance and enumeration

Question

During passive reconnaissance of a target organization's infrastructure, a penetration tester wants to identify key contacts and job responsibilities within the company. Which of the following techniques would be the most effective for this situation?

Options

  • ASocial media scraping
  • BWebsite archive and caching
  • CDNS lookup
  • DFile metadata analysis

How the community answered

(57 responses)
  • A
    72% (41)
  • B
    5% (3)
  • C
    16% (9)
  • D
    7% (4)

Why each option

Social media scraping is the most effective passive reconnaissance technique to identify key contacts and their job responsibilities within a target organization.

ASocial media scrapingCorrect

Social media platforms like LinkedIn, Facebook, and Twitter are rich sources of publicly available information about employees, their roles, connections, and even interests. Scraping or manually reviewing these platforms during passive reconnaissance allows a tester to gather intelligence on key personnel, organizational structure, and potential social engineering targets without direct interaction.

BWebsite archive and caching

Website archive and caching primarily reveal historical website content, which might contain old contact info but is less effective for current key contacts and responsibilities.

CDNS lookup

DNS lookups primarily reveal domain registration details and network infrastructure, not detailed information about individual employees and their job responsibilities.

DFile metadata analysis

File metadata analysis can reveal information about the creator or last modifier of a document, but it's often limited to specific files and less comprehensive for identifying key contacts across an organization.

Concept tested: Passive reconnaissance for personnel information

Topics

#Passive reconnaissance#OSINT#Social media intelligence#Target identification

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice