CompTIA Security+ (SY0-701) — Question 498

Which of the following activities uses OSINT?

Answer options

• A. Social engineering testing
• B. Data analysis of logs
• C. Collecting evidence of malicious activity
• D. Producing IOC for malicious artifacts

Correct answer: A

Explanation

Social engineering testing leverages OSINT by utilizing publicly available information to manipulate individuals into divulging confidential information. The other options, such as data analysis of logs, collecting evidence, and producing IOC, typically rely on internal data rather than external publicly accessible sources.