A county mail gateway exposes rich SMTP behaviors and user-enumeration traits during approved probing. What should the tester emphasize about that footprinting?
Select an answer to reveal the explanation.
Short Explanation
A chatty mail gateway is like a receptionist who confirms which names are real. That helps later password guessing far more than people admit. Write it up as disclosure — you do not need a stolen inbox to prove the risk exists.
Full Explanation
SMTP and related mail services often expose features, relay behavior, or user-validity differences that aid reconnaissance. Those clues can enable later credential-oriented attacks conceptually and constitute meaningful information disclosure. Full mailbox access is not required to recognize the weakness class. Destructive validation such as ransomware is never an appropriate confirmation step.