A penetration tester identifies an exposed corporate directory containing first and last names and phone numbers for employees. Which of the following attack techniques would be the most effective…

The correct answer is A. Smishing. Smishing (SMS phishing) leverages phone numbers to send malicious text messages. Since the tester has access to employee names and phone numbers, smishing is the most effective technique to compromise user accounts through deceptive messages or links.

Submitted by noor.lb· Mar 6, 2026Attacks and Exploits

Question

A penetration tester identifies an exposed corporate directory containing first and last names and phone numbers for employees. Which of the following attack techniques would be the most effective to pursue if the penetration tester wants to compromise user accounts?

Options

ASmishing
BImpersonation
CTailgating
DWhaling

How the community answered

(42 responses)

A
74% (31)
B
5% (2)
C
7% (3)
D
14% (6)

Explanation

Smishing (SMS phishing) leverages phone numbers to send malicious text messages. Since the tester has access to employee names and phone numbers, smishing is the most effective technique to compromise user accounts through deceptive messages or links.

Topics

#social engineering#smishing#account compromise

Community Discussion

No community discussion yet for this question.

Full PT0-003 Practice