PT0-002 · Question #74
During a penetration-testing engagement, a consultant performs reconnaissance of a client to identify potential targets for a phishing campaign. Which of the following would allow the consultant to…
The correct answer is A. Scraping social media sites C. Crawling the client's website. Technical and billing addresses are usually posted on company websites and company social media sites for the their clients to access. The WHOIS lookup will only avail info for the company registrant, an abuse email contact, etc but it may not contain details for billing…
Question
During a penetration-testing engagement, a consultant performs reconnaissance of a client to identify potential targets for a phishing campaign. Which of the following would allow the consultant to retrieve email addresses for technical and billing contacts quickly, without triggering any of the client's cybersecurity tools? (Choose two.)
Options
- AScraping social media sites
- BUsing the WHOIS lookup tool
- CCrawling the client's website
- DPhishing company employees
- EUtilizing DNS lookup tools
- FConducting wardriving near the client facility
How the community answered
(39 responses)- A74% (29)
- B13% (5)
- D3% (1)
- E8% (3)
- F3% (1)
Explanation
Technical and billing addresses are usually posted on company websites and company social media sites for the their clients to access. The WHOIS lookup will only avail info for the company registrant, an abuse email contact, etc but it may not contain details for billing addresses.
Topics
Community Discussion
No community discussion yet for this question.