CEH - Ethical Hacking Phases and Reconnaissance

Which type of scan involves sending an email with a **tracking pixel** to determine if the target opens the email, revealing their IP address and email client?

The technique of searching through a target organization's discarded papers, drives, and materials for sensitive information is called **[[blank1]] [[blank2]]**.

**True or False:** A "black box" penetration test is when the tester has full knowledge of the target's infrastructure, including network diagrams and credentials.

**True or False:** An **engagement letter** or **Rules of Engagement (RoE)** document is required before beginning a penetration test to define scope, methods, and legal authorization.

**OSINT** stands for Open Source [[blank1]] [[blank2]], and refers to collecting information from publicly available sources.