A company contracts a security consultant to perform a remote white-box penetration test. The company wants the consultant to focus on Internet-facing services without negatively impacting production services. Which of the following is the consultant MOST likely to use to identify the company's attack surface? (Choose two.)
A) Web crawler
B) WHOIS registry
C) DNS records
D) Company's firewall ACL
E) Internal routing tables
F) Directory service queries

Question

Quizplus · Accepted Answer

The consultant would use WHOIS registry and DNS records to identify the company's attack surface as they provide information about domain ownership and IP address mappings, which are crucial for understanding Internet-facing services.

A Company Contracts a Security Consultant to Perform a Remote