CompTIA Security+ (SY0-501) — Question 879

Which of the following is being used when a malicious actor searches various social media websites to find information about a company's system administrators and help desk staff?

Answer options

• A. Passive reconnaissance
• B. Initial exploitation
• C. Vulnerability scanning
• D. Social engineering

Correct answer: A

Explanation

The correct answer, Passive reconnaissance, refers to gathering information without direct interaction with the target. Initial exploitation involves attacking a system rather than gathering information, Vulnerability scanning is about identifying weaknesses in systems, and Social engineering typically involves manipulating individuals directly rather than researching them online.