CompTIA PenTest+ (PT0-003) PT0-003 — Question 252

A penetration tester wants to gather the names of potential phishing targets who have access to sensitive data. Which of the following would best meet this goal?