Exam 312-50v13 topic 1 question 180 discussion

Choosing C) because with information gathered till now (domains, DNS names, Netblocks, IP address information) the next logical step would be utilizing the and/or extending the gathered information, which is described in these 3 options: --> A) search for new information in trash – extend information base --> B) impersonate an ISP technician – extend information base about networks, domains, etc... --> D) use gathered knowledge about networks and evesdrop there... (maybe you don’t have physical access but there can be WiFi signal...) C) lefts – shoulder surfing is LEAST likely method of social engineering to yield information based on the data collected.

The ethical hacker has collected infrastructure-related data (e.g., IP addresses, DNS details, domains, Netblocks) and now intends to use social engineering to extract more information. The most effective social engineering techniques in this case would involve leveraging the collected data to impersonate a trusted entity or extract information from employees.

Eavesdropping on corporate conversations may provide general business intelligence but is unlikely to reveal specific technical details like network configurations, IP ranges, or login credentials that would be useful for hacking.

You have to be inside the company and especially close to the target to do shoulder surfing. The answer is C.