During a penetration test, you need to find any publicly accessible Microsoft Excel files on the target's website that might contain employee names. You want to use Google to locate these files quickly. Which search query is most effective?

site:target.com filetype:xlsx employee

As part of a social engineering engagement, you need to build a profile of a specific employee who is known to be active on LinkedIn and Twitter. You want to collect their job history, professional interests, and any personal details they have shared publicly. Which approach is most efficient and effective for this task?

Use a tool like theHarvester to search for the employee's email address and associated accounts

Search for the employee's name on Google and compile results from all pages

Use a social media intelligence tool like Maltego to aggregate public data from multiple platforms

Manually browse the employee's LinkedIn and Twitter profiles and note relevant details

You are profiling a target employee for a social engineering campaign. The employee is active on Twitter and frequently posts about their work projects and personal interests. You want to collect their tweets, identify their connections, and analyze their posting patterns. Which tool or method is most efficient for this?

Manually scroll through their Twitter feed and take notes

Search for the employee's name on Google

Use a Twitter OSINT tool like Twint or twayback to download and analyze tweets

Use theHarvester to search for the employee's Twitter handle

As part of a social engineering assessment, you need to build a profile of a target employee. You have found their LinkedIn profile, which lists their job title, skills, and recent projects. What additional step would most effectively help you gather information for a targeted phishing campaign?

Check the employee's public posts and comments for personal interests and communication style

Look up the employee's salary information on public salary databases

Review the employee's connection list to identify their manager

Search for the employee's email address on public forums

EC-CouncilCertified Penetration Testing Professional

Domain 2Objective 1

Open-Source Intelligence (OSINT) CPENT Practice Questions (Page 6)

Part of the Information Gathering and Social Engineering domain, which makes up ~9% of our current practice bank.

39questions here

8free pages

10concepts

Questions 26–30

26application · medium
During a penetration test, you need to find any publicly accessible Microsoft Excel files on the target's website that might contain employee names. You want to use Google to locate these files quickly. Which search query is most effective?
Select an answer first
27foundation · easy
Which OSINT source is specifically designed to index and search for information shared on social media platforms?
Select an answer first
28application · medium
As part of a social engineering engagement, you need to build a profile of a specific employee who is known to be active on LinkedIn and Twitter. You want to collect their job history, professional interests, and any personal details they have shared publicly. Which approach is most efficient and effective for this task?
Select an answer first
29application · medium
You are profiling a target employee for a social engineering campaign. The employee is active on Twitter and frequently posts about their work projects and personal interests. You want to collect their tweets, identify their connections, and analyze their posting patterns. Which tool or method is most efficient for this?
Select an answer first
30application · medium
As part of a social engineering assessment, you need to build a profile of a target employee. You have found their LinkedIn profile, which lists their job title, skills, and recent projects. What additional step would most effectively help you gather information for a targeted phishing campaign?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CPENT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CPENT” is a trademark of its owner, used for identification only.

Open-Source Intelligence (OSINT) CPENT Practice Questions (Page 6)

Questions 26–30

During a penetration test, you need to find any publicly accessible Microsoft Excel files on the target's website that might contain employee names. You want to use Google to locate these files quickly. Which search query is most effective?

Which OSINT source is specifically designed to index and search for information shared on social media platforms?

As part of a social engineering assessment, you need to build a profile of a target employee. You have found their LinkedIn profile, which lists their job title, skills, and recent projects. What additional step would most effectively help you gather information for a targeted phishing campaign?

Keep studying — Information Gathering and Social Engineering