Library IT wants to know whether an abandoned departmental microsite still exposes public directory listings of PDFs. Which fundamentals-level OSINT step is appropriate?
Select an answer to reveal the explanation.
Short Explanation
Sometimes a forgotten microsite still shows a file listing the way a storage room shows unlabeled boxes. Finding that already-public index with search is OSINT. Breaking in to create a listing, or guessing FTP passwords, is a different exam.
Full Explanation
Exposed directory pages (index-of-class listings) are a public-source artifact when a web server publishes them without authentication. Search-engine operators can surface those pages so library IT can see what remains reachable. Creating, attacking, or brute-forcing access is outside PORP. If listings exist, capture URLs and notify the responsible steward; do not treat discovery as authorization to take the site down yourself unless that is the engagement.