nerdexam
(ISC)2

CSSLP · Question #123

Which of the following techniques is used when a system performs the penetration testing with the objective of accessing unauthorized information residing inside a computer?

The correct answer is C. Port scanning. Port scanning is a technique used in penetration testing to identify open ports and services on a target system, which can then be exploited to gain unauthorized access and information.

Secure Software Testing

Question

Which of the following techniques is used when a system performs the penetration testing with the objective of accessing unauthorized information residing inside a computer?

Options

  • ABiometrician
  • BVan Eck Phreaking
  • CPort scanning
  • DPhreaking

How the community answered

(21 responses)
  • A
    10% (2)
  • B
    5% (1)
  • C
    86% (18)

Why each option

Port scanning is a technique used in penetration testing to identify open ports and services on a target system, which can then be exploited to gain unauthorized access and information.

ABiometrician

A biometrician is a person who applies statistical methods to biological facts and data, which is completely unrelated to penetration testing techniques.

BVan Eck Phreaking

Van Eck Phreaking is a form of electronic eavesdropping that captures electromagnetic emanations from computer monitors to reconstruct screen content, a specific type of information access but not a general penetration testing technique focused on accessing unauthorized 'information residing inside a computer' via network interaction.

CPort scanningCorrect

Port scanning is a fundamental technique in penetration testing where a system or network is probed to discover open ports and services, which can reveal vulnerabilities or potential entry points for an attacker to gain unauthorized access and extract information. Identifying open ports is often a prerequisite for many types of attacks aimed at accessing internal data.

DPhreaking

Phreaking generally refers to the act of circumventing telecommunications systems, primarily telephone networks, to make free calls or other unauthorized services, not directly about accessing data inside a computer via penetration testing.

Concept tested: Penetration testing techniques

Topics

#Penetration testing#Port scanning#Security testing#Vulnerability assessment

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice