MENU
The first and foremost step for a penetration test is information gathering. The main objective of this test is to gather information about the target system which can be used in a malicious manner to gain access to the target systems.
Which of the following information gathering terminologies refers to gathering information through social engineering on-site visits, face-to-face interviews, and direct questionnaires?
Suggested Answer: A
Get Premium ECSAv10 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
13 comments · newest first
MI
Miles
12 months ago
Pseudonymous? That's a new one for me!
KE
Kendra
12 months ago
Really? I didn't know it was called that. Sounds a bit off.
DI
Dino
12 months ago
Yeah, social engineering is all about being active!
CA
Carisa
1 year ago
I thought it was Open Source Gathering, but I guess not.
AD
Adaline
1 year ago
Definitely Active Information Gathering!
CH
Chandra
1 year ago
I feel like I might confuse Active with Open Source; they both seem related to gathering info, but I can't recall the specifics.
BA
Barabara
1 year ago
This question reminds me of a practice test where we discussed the differences between active and passive gathering techniques.
JU
Judy
1 year ago
I'm not entirely sure, but I remember something about social engineering being linked to active methods.
RE
Reena
1 year ago
I think the answer might be Active Information Gathering since it involves direct interaction with people.
EM
Emiko
1 year ago
Hmm, this seems pretty straightforward. I'll just need to double-check the dimensions of the server to confirm if it's a 2U rack server.
CA
Caprice
1 year ago
Ah, I remember learning about these types of fraud schemes in class. I'm pretty confident the answer is C - Voucher handling. That's where the employee creates fake vouchers to steal from the company.
JA
Jamey
1 year ago
Hmm, I'm a bit unsure about this one. The options seem similar, but I'll re-read the question carefully and try to identify the primary division.
FR
Frederica
1 year ago
I studied that the written representation must cover misstatements that the auditor has identified—so it has to be either A or B, but I'm leaning towards A.