312-50V11 · Question #986
Which of the following allows attackers to draw a map or outline the target organization's network infrastructure to know about the actual environment that they are going to hack.
The correct answer is A. Enumeration. Enumeration is the active reconnaissance phase where attackers systematically query a target network to extract host, service, and topology data, effectively drawing a map of the environment before exploitation.
Question
Which of the following allows attackers to draw a map or outline the target organization's network infrastructure to know about the actual environment that they are going to hack.
Options
- AEnumeration
- BVulnerability analysis
- CMalware analysis
- DScanning networks
How the community answered
(66 responses)- A86% (57)
- B3% (2)
- C8% (5)
- D3% (2)
Why each option
Enumeration is the active reconnaissance phase where attackers systematically query a target network to extract host, service, and topology data, effectively drawing a map of the environment before exploitation.
Enumeration involves sending targeted queries to live systems to extract detailed information including active hosts, network topology, open ports, running services, user accounts, and shared resources. This intelligence gathering produces a comprehensive map of the target network infrastructure that directly informs the attacker's exploitation strategy.
Vulnerability analysis assesses already-discovered systems against known CVEs and misconfigurations; it evaluates weaknesses rather than mapping the network layout.
Malware analysis is a defensive discipline focused on reverse-engineering malicious code to understand its behavior and indicators of compromise, not on profiling target infrastructure.
Scanning networks refers specifically to automated port and service probing (e.g., with Nmap) and is a narrower subset of enumeration that does not alone produce a full infrastructure map.
Concept tested: Network enumeration for target infrastructure mapping
Source: https://www.eccouncil.org/train-certify/certified-ethical-hacker-ceh/
Topics
Community Discussion
No community discussion yet for this question.