During a Penetration-Testing Engagement, a Consultant Performs Reconnaissance of a Client

question 47

Multiple Choice

During a penetration-testing engagement, a consultant performs reconnaissance of a client to identify potential targets for a phishing campaign. Which of the following would allow the consultant to retrieve email addresses for technical and billing contacts quickly, without triggering any of the client's cybersecurity tools? (Choose two.)

• A) Scraping social media sites
• B) Using the WHOIS lookup tool
• C) Crawling the client's website
• D) Phishing company employees
• E) Utilizing DNS lookup tools
• F) Conducting wardriving near the client facility

---

Definitions:

Open Market

A system where goods and services are traded freely between participants, often characterized by a lack of restrictions or tariffs.

Consolidated Income Statement

A financial statement that combines and presents the total income and expenses of a parent company and its subsidiaries, showing the net profit or loss of the entire group.

Debt Acquisition

The process of obtaining debt financing or purchasing existing debt from another entity.

Gain Or Loss

The financial result that occurs when the selling price of an asset differs from its original purchase price.