A Penetration Tester Harvests Potential Usernames from a Social Networking

question 509

Multiple Choice

A penetration tester harvests potential usernames from a social networking site. The penetration tester then uses social engineering to attempt to obtain associated passwords to gain unauthorized access to shares on a network server. Which of the following methods is the penetration tester MOST likely using?

• A) Escalation of privilege
• B) SQL injection
• C) Active reconnaissance
• D) Proxy server

---

Definitions:

Due Process

The fair treatment through the normal judicial system, especially as a citizen's entitlement.

Basic Human Right

Fundamental rights that every individual is entitled to, such as freedom, safety, privacy, and equality, regardless of their status.

Fair and Impartial Hearing

A legal requirement ensuring that decisions impacting individual rights or interests are made by an unbiased and fair tribunal or decision-making body.

Sustainable Competitive Advantage

A unique value that an organization develops for a long period, which is not easily replicable by competitors, allowing for long-term success.