A Penetration Tester Is Required to Perform OSINT on Staff

question 45

Multiple Choice

A penetration tester is required to perform OSINT on staff at a target company after completing the infrastructure aspect. Which of the following would be the BEST step for penetration?

• A) Obtain staff information by calling the company and using social engineering techniques.
• B) Visit the client and use impersonation to obtain information from staff.
• C) Send spoofed emails to staff to see if staff will respond with sensitive information.
• D) Search the internet for information on staff such as social networking sites.

---

Definitions:

Routine Requests

A common or repeated type of request made in a business or professional context, often following a standard format or procedure.

Positive Message

Communication aimed at creating a favorable impression or outcome, often focusing on affirmative and encouraging information.

Routine Message

Standardized communications used in everyday business operations, often following a set template or format.

Readers Perception

How an individual reader interprets or understands the content, style, and overall message of a text.