A security researcher is about to evaluate a new secure VoIP routing appliance. The appliance manufacturer claims the new device is hardened against all known attacks and several un-disclosed zero…

Device fingerprinting uses techniques such as active port scanning, banner grabbing, protocol probing, and response analysis to identify which ports are open, which protocols are in use, and what software stack is running on the appliance - providing the enumeration the researcher needs without requiring access to the C or TCL/TKL source code.

A switchport analyzer (SPAN port) passively mirrors network traffic passing through a switch and can only capture traffic already flowing; it does not actively enumerate which ports and protocols the appliance is configured to accept.

Grey box testing is a broader evaluation methodology that involves partial internal knowledge; it does not specifically describe the active probing technique used to enumerate ports and protocols on a device.

Penetration testing is a comprehensive offensive engagement encompassing exploitation and post-exploitation, which is broader in scope and risk than the specific, non-destructive task of enumerating ports and protocols.