Which of the following penetration testing concepts is being used when an attacker uses public Internet databases to enumerate and learn more about a target?

Reconnaissance is the preliminary phase of penetration testing where an attacker passively gathers information about a target, such as network ranges, employee details, and technologies used, without directly interacting with the target's systems. This often involves using publicly available resources like WHOIS databases, DNS records, social media, and search engines to enumerate and learn more about the target.

Initial exploitation is the phase where an attacker actively gains unauthorized access to a system or network after identifying vulnerabilities, which goes beyond mere information gathering.

Pivoting is a post-exploitation technique where an attacker uses a compromised system to gain access to other internal systems that were not directly accessible from the initial entry point.

Vulnerability scanning involves actively probing a target's systems and network for known weaknesses using automated tools, which is a direct interaction, not just passive information gathering from public databases.

White box testing is a type of penetration test where the tester has full knowledge of the target's internal network, system architecture, and source code, rather than a specific method of initial information gathering.