CompTIA Security+ (SY0-501) — Question 457

Which of the following penetration testing concepts is being used when an attacker uses public Internet databases to enumerate and learn more about a target?

Answer options

• A. Reconnaissance
• B. Initial exploitation
• C. Pivoting
• D. Vulnerability scanning
• E. White box testing

Correct answer: A

Explanation

The correct answer is A. Reconnaissance, as it involves gathering information about a target before launching an attack. The other options, such as Initial exploitation, Pivoting, Vulnerability scanning, and White box testing, refer to different phases or techniques in penetration testing that do not specifically involve information gathering from public databases.