多国籍コンサルティング会社に対する正式な評価を実施する倫理的ハッカーは、従業員が職務経歴の詳細を共有したり、業界関連の議論を行ったりする、一般にアクセス可能なオンラインプラットフォームからのみ情報を収集し始めます。個々の役割の説明、公に認められた技術的能力、社内イニシアチブに言及する共同作業の会話、プロジェクトや部門を説明するために繰り返し使用される用語を関連付けることで、テスターは報告関係の構造化されたビューを作成し、一般的に使用されているテクノロジーを特定し、社内の命名規則を推測します。
偵察手法の観点から、どのような技術が適用されているのか?
正解:C
The correct answer is Footprinting through Social Networking Sites. CEH reconnaissance coverage explains that public social platforms such as LinkedIn, Facebook, Twitter, and similar services can reveal personal, professional, and organizational information that is extremely useful during footprinting. In this question, the tester is not interacting directly with employees to manipulate them, so it is not primarily social engineering.
Instead, the tester passively mines employee profiles, role histories, technical skills, discussion patterns, project language, and relationship clues to infer technologies, internal structure, and naming conventions.
That is exactly the kind of intelligence CEH associates with social-network-based footprinting. Search engines and internet research services can support recon, but the scenario specifically centers on employee- generated data from public networking and discussion platforms. CEH materials note that social platforms often reveal far more than users realize, including business functions, technologies in use, recent initiatives, physical locations, interests, and organizational hierarchy. Such details can later support targeted phishing, impersonation, or infrastructure profiling. Because the intelligence is gathered from public social and professional networking ecosystems, social networking site footprinting is the most precise methodological classification.