Where should a security tester be looking for information that could be used by an attacker against an organization?
Which of the following would be the best reason for sending a single SMTP message to an address that does not exist within the target company?