CSSLP · Question #174
Which of the following are the scanning methods used in penetration testing? Each correct answer represents a complete solution. Choose all that apply.
The correct answer is A. Vulnerability B. Port D. Network. Penetration testing commonly employs vulnerability scanning to find known flaws, port scanning to identify open network access points, and network scanning to discover active hosts and network topology.
Question
Which of the following are the scanning methods used in penetration testing? Each correct answer represents a complete solution. Choose all that apply.
Options
- AVulnerability
- BPort
- CServices
- DNetwork
How the community answered
(22 responses)- A86% (19)
- C14% (3)
Why each option
Penetration testing commonly employs vulnerability scanning to find known flaws, port scanning to identify open network access points, and network scanning to discover active hosts and network topology.
Vulnerability scanning involves using automated tools to identify known weaknesses and misconfigurations in systems and applications that could be exploited by an attacker during a penetration test.
Port scanning is a technique used to discover which ports on a network host are open and listening, indicating active services that might be targets for further penetration testing.
Services are identified *through* port and network scanning, but 'service scanning' is not typically considered a distinct primary scanning *method* in the same category as port, vulnerability, or network scanning itself.
Network scanning involves mapping out the network infrastructure, identifying active hosts, their IP addresses, and potentially their operating systems, which is crucial for understanding the target environment in a penetration test.
Concept tested: Penetration testing scanning methods
Topics
Community Discussion
No community discussion yet for this question.