CompTIA PenTest+ (PT0-002) — Question 120

Which of the following would assist a penetration tester the MOST when evaluating the susceptibility of top-level executives to social engineering attacks?

Answer options

• A. Scraping social media for personal details
• B. Registering domain names that are similar to the target company's
• C. Identifying technical contacts at the company
• D. Crawling the company's website for company information

Correct answer: A

Explanation

Scraping social media for personal details is the most effective method because it allows the tester to gather specific information that can be exploited in social engineering attacks. The other options, while potentially useful, do not provide as direct insight into the personal lives of executives that could be leveraged in such attacks.