Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Eccouncil Exam ECSAv10 Topic 1 Question 86 Discussion

Actual exam question for Eccouncil's ECSAv10 exam
Question #: 86
Topic #: 1
[All ECSAv10 Questions]

Information gathering is performed to:

i) Collect basic information about the target company and its network

ii) Determine the operating system used, platforms running, web server versions, etc.

iii) Find vulnerabilities and exploits

Which of the following pen testing tests yields information about a company's technology infrastructure?

Show Suggested Answer Hide Answer
Suggested Answer: D

Contribute your Thoughts:

Raylene
2 months ago
The answer is clearly (i) and (ii). You can't just jump in without knowing the lay of the land. Although, I have to admit, the idea of searching for trade association directories is kind of hilarious. I mean, who does that? 'Excuse me, sir, do you have a moment to talk about your company's network vulnerabilities?' Priceless.
upvoted 0 times
Effie
1 months ago
C) Searching for trade association directories
upvoted 0 times
...
Pansy
2 months ago
B) Analyzing the link popularity of the company's website
upvoted 0 times
...
Harris
2 months ago
A) Searching for web page posting patterns
upvoted 0 times
...
...
Tamekia
3 months ago
I'm going with (i) and (ii) on this one. Gotta have that solid foundation of knowledge before you can really dive in. Although, I have to say, searching for job postings sounds like a great way to get a peek behind the curtain. Maybe I'll try that next time I'm feeling a bit like a corporate spy.
upvoted 0 times
...
Gerald
3 months ago
Hmm, let's see... I'd say (i) and (ii) are the way to go. You gotta know what you're dealing with before you can start poking around. Though, I have to admit, the idea of searching for job postings to learn about a company's tech is kind of genius. Maybe I'll try that next time I'm feeling a little mischievous.
upvoted 0 times
Carin
2 months ago
C) Searching for trade association directories
upvoted 0 times
...
Verona
2 months ago
B) Analyzing the link popularity of the company's website
upvoted 0 times
...
Elouise
2 months ago
A) Searching for web page posting patterns
upvoted 0 times
...
...
Adelina
3 months ago
Ooh, this one's a tricky one. I'd have to go with (i) and (ii) - gotta know your enemy, am I right? Although, personally, I'd throw in a bit of (iii) just for the fun of it. Can't have a pen test without a little vulnerability hunt, right?
upvoted 0 times
Sina
2 months ago
Catalina: True, you need to cover all bases to find vulnerabilities.
upvoted 0 times
...
Eveline
2 months ago
User 3: I think a mix of all three options is important for a thorough pen test.
upvoted 0 times
...
Catalina
2 months ago
User 2: Definitely, understanding their technology infrastructure is key.
upvoted 0 times
...
Jolanda
2 months ago
User 1: I agree, knowing the target company's network is crucial.
upvoted 0 times
...
...
Frederic
3 months ago
The right answer is definitely (i) and (ii). Collecting information about the target company's network and infrastructure is crucial for a thorough pen testing assessment.
upvoted 0 times
Zachary
3 months ago
Analyzing the link popularity of the company's website can also provide valuable insights into their technology infrastructure.
upvoted 0 times
...
...
Tamra
3 months ago
I think both options A and B are valid, as they can help in gathering information about the target company's technology infrastructure.
upvoted 0 times
...
Ethan
3 months ago
I believe option A) Searching for web page posting patterns could also yield information about the company's technology infrastructure.
upvoted 0 times
...
Brent
4 months ago
I agree with Louisa, analyzing the link popularity can provide insights into the company's technology infrastructure.
upvoted 0 times
...
Louisa
4 months ago
I think the answer is B) Analyzing the link popularity of the company's website.
upvoted 0 times
...

Save Cancel