The Importance of Penetration Testing

B.

The correct answer is B. Reconnaissance.

Reconnaissance is the process of gathering information about a target system or network to identify vulnerabilities and potential attack vectors. In this scenario, the penetration tester is using a technique called web crawling to systematically navigate and extract data from the target website. This data can include information such as directory structures, hidden files, user credentials, and application logic flaws.

URL hijacking, on the other hand, is a type of attack where an attacker modifies the URL of a legitimate website to redirect users to a malicious site. This is not relevant to the actions of the penetration tester in this scenario.

White box testing is a type of security testing where the tester has full knowledge of the internal workings of the system being tested. This is not relevant to the scenario because the penetration tester does not have access to the internal workings of the target website.

Escalation of privilege is a type of attack where an attacker gains increased levels of access to a system or network beyond what they are authorized for. This is not relevant to the scenario because the penetration tester is only performing authorized activities as part of their testing.