nerdexam
(ISC)2

CSSLP · Question #174

Which of the following are the scanning methods used in penetration testing? Each correct answer represents a complete solution. Choose all that apply.

The correct answer is A. Vulnerability B. Port D. Network. Penetration testing commonly employs vulnerability scanning to find known flaws, port scanning to identify open network access points, and network scanning to discover active hosts and network topology.

Secure Software Testing

Question

Which of the following are the scanning methods used in penetration testing? Each correct answer represents a complete solution. Choose all that apply.

Options

  • AVulnerability
  • BPort
  • CServices
  • DNetwork

How the community answered

(22 responses)
  • A
    86% (19)
  • C
    14% (3)

Why each option

Penetration testing commonly employs vulnerability scanning to find known flaws, port scanning to identify open network access points, and network scanning to discover active hosts and network topology.

AVulnerabilityCorrect

Vulnerability scanning involves using automated tools to identify known weaknesses and misconfigurations in systems and applications that could be exploited by an attacker during a penetration test.

BPortCorrect

Port scanning is a technique used to discover which ports on a network host are open and listening, indicating active services that might be targets for further penetration testing.

CServices

Services are identified *through* port and network scanning, but 'service scanning' is not typically considered a distinct primary scanning *method* in the same category as port, vulnerability, or network scanning itself.

DNetworkCorrect

Network scanning involves mapping out the network infrastructure, identifying active hosts, their IP addresses, and potentially their operating systems, which is crucial for understanding the target environment in a penetration test.

Concept tested: Penetration testing scanning methods

Topics

#Penetration Testing#Security Scanning#Port Scanning#Vulnerability Scanning

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice