Why would you consider sending an email to an address that you know does not exist within the company you are performing a Penetration Test for?
Suggested Answer: D
Get Premium 312-50 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
11 comments · newest first
CA
Carol
11 months ago
Sending to a non-existent address can help identify security gaps too!
MA
Marvel
11 months ago
Wait, does this really work? Sounds kinda sketchy.
BR
Brandon
12 months ago
Agree, option D makes the most sense!
JO
Josphine
12 months ago
I think it’s just a waste of time, honestly.
LA
Lawana
1 year ago
Definitely to see how the email server handles undeliverable messages.
ZO
Zona
1 year ago
I vaguely recall something about using email to gather information on the infrastructure. Option D sounds familiar, but I wonder if there are other valid reasons too.
LA
Laticia
1 year ago
I feel like sending an email just to see if it bounces back is a bit risky. What if it triggers some kind of alert?
LE
Leoma
1 year ago
I remember practicing a similar question where we discussed the implications of email responses during a pentest. Option D seems to fit that context.
KI
Kimberlie
1 year ago
I think sending an email to a non-existent address could help identify how the email server handles undeliverable messages, but I'm not entirely sure if that's the main reason.
YO
Yolande
1 year ago
Hmm, I'm a bit unsure about this one. I know sequence data flow is used for automating workflows, but I'm not sure which of these options would be the most suitable application.
NA
Naomi
1 year ago
I'm a bit confused by the syntax here. I'll need to review my notes on list comprehensions to make sure I'm interpreting this correctly.