PT0-003: CompTIA PenTest+Demo

By CompTIA · Question Mode

QuestionQ236

Reconnaissance and Enumeration

A penetration tester performs reconnaissance and seeks methods to obtain administrator email addresses for use in a phishing campaign. Which of the following tools should the penetration tester use?

  • A DIG
  • B Nmap
  • C WHOIS
  • D Shodan
Explanation

WHOIS queries can reveal domain-registration contact details, including administrative email addresses when those records are available.

Community Discussion

No comments yet. Be the first to start the discussion!