312-50V13 Question #559: Real Exam Question with Answer & Explanation

Question

Which is the first step followed by Vulnerability Scanners for scanning a network?

Options

• AOS Detection
• BFirewall detection
• CTCP/UDP Port scanning
• DChecking if the remote host is alive

Explanation

Vulnerability Scanner: First Step Explanation

Checking if the remote host is alive (D) is the logical first step because there is no point in scanning a system that is unreachable or powered off. Vulnerability scanners use techniques like ICMP ping requests or ARP requests to confirm a host is active before investing resources in further scanning. This "host discovery" phase ensures efficiency by eliminating dead IP addresses from the scan queue early in the process.

Why the other options are wrong:

• A (OS Detection) comes much later in the process - you need to know which ports are open before you can fingerprint the operating system.
• B (Firewall Detection) also occurs further into the scanning process, typically after initial port scanning reveals filtered or blocked responses.
• C (TCP/UDP Port Scanning) is the second major step - it only makes sense to scan ports after confirming the host is actually online and reachable.

🧠 Memory Tip: Think of it like calling someone before visiting their home - you first check if they're home (alive), then ask which rooms are open (ports), then figure out who lives there (OS), and finally check security (firewall). Always confirm presence before proceeding!

No community discussion yet for this question.