Eccouncil 312-50 Exam - Topic 3 Question 60 Discussion

Actual exam question for Eccouncil's 312-50 exam

Question #: 60
Topic #: 3

Why would you consider sending an email to an address that you know does not exist within the company you are performing a Penetration Test for?

ATo determine who is the holder of the root account

BTo perform a DoS

CTo create needless SPAM

DTo illicit a response back that will reveal information about email servers and how they treat undeliverable mail

ETo test for virus protection

Show Suggested Answer

Suggested Answer: D

by Oretha at Oct 28, 2022, 10:44 AM

Limited Time Offer

25%

Off

Get Premium 312-50 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Carol

7 months ago

Sending to a non-existent address can help identify security gaps too!

upvoted 0 times

...

Marvel

7 months ago

Wait, does this really work? Sounds kinda sketchy.

upvoted 0 times

...

Brandon

7 months ago

Agree, option D makes the most sense!

upvoted 0 times

...

Josphine

7 months ago

I think it’s just a waste of time, honestly.

upvoted 0 times

...

Lawana

7 months ago

Definitely to see how the email server handles undeliverable messages.

upvoted 0 times

...

Zona

8 months ago

I vaguely recall something about using email to gather information on the infrastructure. Option D sounds familiar, but I wonder if there are other valid reasons too.

upvoted 0 times

...

Laticia

8 months ago

I feel like sending an email just to see if it bounces back is a bit risky. What if it triggers some kind of alert?

upvoted 0 times

...

Leoma

8 months ago

I remember practicing a similar question where we discussed the implications of email responses during a pentest. Option D seems to fit that context.

upvoted 0 times

...

Kimberlie

8 months ago

I think sending an email to a non-existent address could help identify how the email server handles undeliverable messages, but I'm not entirely sure if that's the main reason.

upvoted 0 times

...

Yolande

8 months ago

Hmm, I'm a bit unsure about this one. I know sequence data flow is used for automating workflows, but I'm not sure which of these options would be the most suitable application.

upvoted 0 times

...

Naomi

8 months ago

I'm a bit confused by the syntax here. I'll need to review my notes on list comprehensions to make sure I'm interpreting this correctly.

upvoted 0 times

...