Which phase in the ethical hacking cycle involves finding exploitable vulnerabilities in the target system?

The correct answer is B. Gaining Access. Gaining Access (B) is the phase where an attacker actively exploits discovered vulnerabilities - using tools like Metasploit, password cracking, or buffer overflows - to break into the target system. This is the phase that converts knowledge of a weakness into actual unauthorized

Ethical Hacking Fundamentals

Question

Options

AReconnaissance
BGaining Access
CMaintaining Access
DCovering Tracks

How the community answered

(19 responses)

A
5% (1)
B
89% (17)
C
5% (1)

Explanation

Gaining Access (B) is the phase where an attacker actively exploits discovered vulnerabilities - using tools like Metasploit, password cracking, or buffer overflows - to break into the target system. This is the phase that converts knowledge of a weakness into actual unauthorized control.

Reconnaissance (A) is wrong because it only involves gathering information about the target (IPs, open ports, employee names) - no exploitation occurs yet.
Maintaining Access (C) is wrong because it happens after entry is achieved, focusing on persistence (backdoors, rootkits) so the attacker can return later.
Covering Tracks (D) is wrong because it's the cleanup phase - clearing logs and hiding evidence of the intrusion after the fact.

Memory tip: Think of the phases as a story - you scout the target (Recon), break in (Gaining Access), set up camp (Maintaining Access), then hide your footprints (Covering Tracks). "Gaining Access" is literally the moment of the breach.

Topics

#Ethical Hacking Phases#Vulnerability Identification#Gaining Access#System Assessment

Community Discussion

No community discussion yet for this question.

Full 112-52 Practice