Which description best describes the Google Hacking Database (GHDB)?

• A. A database of queries to identify sensitive data
• B. A search engine optimization guide
• C. A tool for password cracking
• D. A malware repository

Answer: (A)

The idea being tested is that the Google Hacking Database is a collection of search queries designed to uncover sensitive data exposed on the public web. These so-called Google dorks use search operators to narrow results to likely places where sensitive information might live, such as misconfigured servers, exposed configuration files, backup copies, admin pages, or credential files. By studying these queries, a security professional can understand what an attacker could discover through Google and identify and remediate exposures during a sanctioned assessment. It’s not about optimizing search rankings, cracking passwords, or serving as a malware repository, which is why the description of a database of queries to identify sensitive data is the best fit.