To create a botnet. the attacker can use several techniques to scan vulnerable machines. The attacker first collects Information about a large number of vulnerable machines to create a list…

Question

Options

• AHit-list-scanning technique
• BTopological scanning technique
• CSubnet scanning technique
• DPermutation scanning technique

• A
  91% (59)
• B
  5% (3)
• C
  2% (1)
• D
  3% (2)

Explanation

Hit-List Scanning Technique Explained

Option A is correct because the hit-list scanning technique involves an attacker pre-collecting a large list of vulnerable machines before infection begins, then splitting that list among newly compromised machines so each bot scans its assigned portion simultaneously - this is the defining characteristic of rapid, coordinated botnet propagation described in the question.

Why the distractors are wrong:

• B (Topological scanning) uses information found on the infected machine itself (e.g., routing tables, logs) to find new targets, rather than using a pre-built list
• C (Subnet scanning) targets machines within the same subnet as the compromised host, focusing on local network proximity rather than a pre-distributed list
• D (Permutation scanning) uses a shared pseudorandom permutation of IP addresses to avoid rescanning the same machines, which is a coordination strategy rather than a pre-collected list approach

Memory Tip: Think of "hit-list" like a hitman with a pre-written target list - the attacker does the homework first, compiles the list, then divides and conquers by handing portions of that list to newly infected machines. If the list comes before infection, it's a hit-list.

No community discussion yet for this question.