During a Penetration-Testing Engagement, a Consultant Performs Reconnaissance of a Client

question 47

Multiple Choice

During a penetration-testing engagement, a consultant performs reconnaissance of a client to identify potential targets for a phishing campaign. Which of the following would allow the consultant to retrieve email addresses for technical and billing contacts quickly, without triggering any of the client's cybersecurity tools? (Choose two.)

• A) Scraping social media sites
• B) Using the WHOIS lookup tool
• C) Crawling the client's website
• D) Phishing company employees
• E) Utilizing DNS lookup tools
• F) Conducting wardriving near the client facility

---

Definitions:

Blocks of Text

Large, continuous segments of text without breaks, often making reading or understanding difficult.

Derivations

The process of obtaining something from a source or origin, often used in reference to the derivation of words or mathematical proofs.

Symbols

Objects, figures, signs, or characters used to represent ideas, beliefs, or tangible entities.

Appendices

A section at the end of a document or book containing additional information or data.