CompTIA PenTest+ (PT0-003) — Question 178

During a penetration test, a junior tester uses Hunter.io for an assessment and plans to review the information that will be collected. Which of the following describes the information the junior tester will receive from the Hunter.io tool?

Answer options

• A. A collection of email addresses for the target domain that is available on multiple sources on the internet
• B. DNS records for the target domain and subdomains that could be used to increase the external attack surface
• C. Data breach information about the organization that could be used for additional enumeration
• D. Information from the target's main web page that collects usernames, metadata, and possible data exposures

Correct answer: A

Explanation

The correct answer, A, is accurate because Hunter.io specializes in gathering publicly available email addresses associated with a domain. The other options, while related to information gathering, do not specifically pertain to the functionality of Hunter.io; B refers to DNS records, C discusses data breaches, and D involves web page data collection.