Future Business Leaders of America (FBLA) Cybersecurity Practice Test

What is the purpose of a Directory Harvest Attack?

1. To hack into a user's email account

2. To determine valid email addresses associated with a server

3. To send spam directly to users

4. To gain unauthorized access to user information

The correct answer is: To determine valid email addresses associated with a server

The purpose of a Directory Harvest Attack is to determine valid email addresses associated with a server. This type of attack involves a malicious actor systematically guessing or probing the email addresses on a mail server, often by trying common names or known variations. The primary goal is to identify legitimate email addresses that can then be used for future attacks, such as spam campaigns or phishing attempts. By discovering valid email addresses, attackers can adapt their strategies to target these users more effectively, increasing the likelihood of successful exploitation. This technique is particularly malicious because it often takes advantage of the victimized organization’s infrastructure without needing to directly compromise accounts or data at that stage. Other options mention unauthorized access, hacking, or sending spam directly, which may occur as a follow-up to identifying valid email addresses, but the essence of a Directory Harvest Attack specifically centers around the reconnaissance of valid emails rather than immediate harmful actions.