Information gathering is performed to:
i) Collect basic information about the target company and its network
ii) Determine the operating system used, platforms running, web server versions, etc.
iii) Find vulnerabilities and exploits

Which of the following pen testing tests yields information about a company's technology infrastructure?
Suggested Answer: D
Get Premium ECSAv10 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
ZA
Zack
11 months ago
I disagree, job postings are more about HR than tech.
NI
Niesha
11 months ago
Surprised that job postings could give tech insights!
EV
Evangelina
12 months ago
Option C seems off, not really tech-focused.
LO
Louvenia
12 months ago
I think option B is more relevant for tech infrastructure.
IS
Isadora
1 year ago
Definitely option A, web page patterns can reveal a lot!
BE
Beth
1 year ago
I recall that trade association directories can sometimes list tech stacks, but I’m not sure if that’s the best answer here.
SE
Serina
1 year ago
I practiced a similar question, and I feel like searching for job postings might give insights into the technologies they use, but I’m not confident.
SK
Skye
1 year ago
I’m not entirely sure, but I remember something about analyzing link popularity being more about SEO than tech infrastructure.
ST
Stephania
1 year ago
I think the question is about gathering technical details, so maybe option A could be relevant since it involves web pages.
AR
Arlene
1 year ago
Ah, I remember learning about this in class. It's definitely a banquet arrangement - the rectangular or oval shape with chairs on both sides is a classic banquet setup.
GE
Gertude
1 year ago
Based on the information provided, I think the full sandbox should be refreshed after each push from the partial data sandbox. That way, the full sandbox will always have the latest approved configuration and code.
DE
Destiny
1 year ago
This looks like a straightforward question on the key stages of an identity and access management system. I'll need to think through the main components carefully, but I'm confident I can identify the correct answer.