Discovering IT Administrators in Passive Vulnerability Assessment | CompTIA CAS-003
Question
A consultant is hired to perform a passive vulnerability assessment of a company to determine what information might be collected about the company and its employees.
The assessment will be considered successful if the consultant can discover the name of one of the IT administrators.
Which of the following is MOST likely to produce the needed information?
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B. C. D.A.
Of the options provided, DNS enumeration is the most likely to produce the needed information for a passive vulnerability assessment.
DNS enumeration involves querying a domain name server to obtain information about a company's domain name and associated IP addresses. This information can reveal hostnames, subdomains, and other network information, which can be used to map out a network and identify potential vulnerabilities.
While Whois can provide information about the owner of a domain name, it is not likely to reveal the name of an IT administrator. Whois primarily provides contact information for the domain owner, such as their name, address, and email.
A vulnerability scanner is an automated tool used to identify vulnerabilities in a network or system. However, it typically requires active scanning and probing to discover vulnerabilities, which is not within the scope of a passive vulnerability assessment.
Fingerprinting involves collecting information about a system or network to determine its operating system, software, and configuration. While fingerprinting can provide valuable information about a target, it is not likely to reveal the name of an IT administrator.
In summary, DNS enumeration is the most likely option to provide the needed information for a passive vulnerability assessment.
