A Company Contracts a Security Consultant to Perform a Remote

Multiple Choice

A company contracts a security consultant to perform a remote white-box penetration test. The company wants the consultant to focus on Internet-facing services without negatively impacting production services. Which of the following is the consultant MOST likely to use to identify the company's attack surface? (Choose two.)

A) Web crawler
B) WHOIS registry
C) DNS records
D) Company's firewall ACL
E) Internal routing tables
F) Directory service queries