nerdexam
EC-Council

312-50V11 · Question #986

Which of the following allows attackers to draw a map or outline the target organization's network infrastructure to know about the actual environment that they are going to hack.

The correct answer is A. Enumeration. Enumeration is the active reconnaissance phase where attackers systematically query a target network to extract host, service, and topology data, effectively drawing a map of the environment before exploitation.

Enumeration

Question

Which of the following allows attackers to draw a map or outline the target organization's network infrastructure to know about the actual environment that they are going to hack.

Options

  • AEnumeration
  • BVulnerability analysis
  • CMalware analysis
  • DScanning networks

How the community answered

(66 responses)
  • A
    86% (57)
  • B
    3% (2)
  • C
    8% (5)
  • D
    3% (2)

Why each option

Enumeration is the active reconnaissance phase where attackers systematically query a target network to extract host, service, and topology data, effectively drawing a map of the environment before exploitation.

AEnumerationCorrect

Enumeration involves sending targeted queries to live systems to extract detailed information including active hosts, network topology, open ports, running services, user accounts, and shared resources. This intelligence gathering produces a comprehensive map of the target network infrastructure that directly informs the attacker's exploitation strategy.

BVulnerability analysis

Vulnerability analysis assesses already-discovered systems against known CVEs and misconfigurations; it evaluates weaknesses rather than mapping the network layout.

CMalware analysis

Malware analysis is a defensive discipline focused on reverse-engineering malicious code to understand its behavior and indicators of compromise, not on profiling target infrastructure.

DScanning networks

Scanning networks refers specifically to automated port and service probing (e.g., with Nmap) and is a narrower subset of enumeration that does not alone produce a full infrastructure map.

Concept tested: Network enumeration for target infrastructure mapping

Source: https://www.eccouncil.org/train-certify/certified-ethical-hacker-ceh/

Topics

#network mapping#infrastructure reconnaissance#enumeration#attack phases

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice