Study. uk . com
  1. Home
  2. All questions
  3. Question 444

CompTIA Security+ study material · question 444 of 611

An assessor builds a target profile from company registrations, job adverts and public code repositories. What is this activity?

  1. Vulnerability validation
  2. Threat hunting
  3. Active scanning
  4. Open-source intelligence gathering
Show the answer

Answer: D. Open-source intelligence gathering

Public sources produce the reconnaissance that precedes targeted attacks, and leave no trace on the target.

Source: NIST SP 800-115 (NIST) — SP 800-115 § 4 Target Identification and Analysis Techniques

Challenge yourself on this topic → Study as cards