CASP+ CAS-003 – Question 132

0
71

Company.org has requested a black-box security assessment be performed on key cyber terrain. On area of concern is the company’s SMTP services. The security assessor wants to run reconnaissance before taking any additional action and wishes to determine which SMTP server is Internet-facing. Which of the following commands should the assessor use to determine this information?

A. dnsrecon ““d company.org ““t SOA
B. dig company.org mx
C. nc ““v company.org
D. whois company.org

Correct Answer: A