CASP+ CAS-003 – Question 94


A consultant is hired to perform a passive vulnerability assessment of a company to determine what information might be collected about the company and its
employees. The assessment will be considered successful if the consultant can discover the name of one of the IT administrators.
Which of the following is MOST likely to produce the needed information?

A. Whois
B. DNS enumeration
C. Vulnerability scanner
D. Fingerprinting

Correct Answer: A