A security researcher is about to evaluate a new secure VoIP routing appliance. The appliance manufacturer claims the new device is hardened against all known attacks and several un-disclosed zero…

Question

Options

• ADevice fingerprinting
• BSwitchport analyzer
• CGrey box testing
• DPenetration testing

• A
  85% (28)
• B
  3% (1)
• C
  9% (3)
• D
  3% (1)

Explanation

Device fingerprinting is the process of identifying a device's operating system, open ports, services, and protocols by analyzing its network responses (e.g., TCP/IP stack behavior, banner grabbing, response to crafted packets). It is the appropriate technique to enumerate what ports and protocols an appliance is using without needing internal access or source code. This is especially relevant here because the appliance is claimed to be hardened, so active exploitation (penetration testing, Option D) may not succeed and is not the goal - enumeration is. A Switchport analyzer/SPAN port (Option B) captures traffic but requires physical network access and existing traffic to analyze. Grey box testing (Option C) implies partial knowledge of internals and is a testing methodology, not a specific enumeration technique. Device fingerprinting using tools like Nmap is the standard first step for passive/active enumeration of an unknown device.

No community discussion yet for this question.