nerdexam
(ISC)2

CSSLP · Question #28

John works as a professional Ethical Hacker. He has been assigned the project of testing the attack phase successfully: Information gathering Determination of network range Identification of active…

The correct answer is A. Perform OS fingerprinting on the We-are-secure network. After identifying active systems and open ports, the ethical hacker should next perform OS fingerprinting to determine the operating systems in use.

Secure Software Testing

Question

John works as a professional Ethical Hacker. He has been assigned the project of testing the attack phase successfully: Information gathering Determination of network range Identification of active systems Location of open ports and applications Now, which of the following tasks should he perform next?

Options

  • APerform OS fingerprinting on the We-are-secure network.
  • BMap the network of We-are-secure Inc.
  • CInstall a backdoor to log in remotely on the We-are-secure server.
  • DFingerprint the services running on the we-are-secure network.

How the community answered

(61 responses)
  • A
    72% (44)
  • B
    3% (2)
  • C
    8% (5)
  • D
    16% (10)

Why each option

After identifying active systems and open ports, the ethical hacker should next perform OS fingerprinting to determine the operating systems in use.

APerform OS fingerprinting on the We-are-secure network.Correct

OS fingerprinting is the next logical step after identifying active systems and open ports because it determines the specific operating systems running on target machines, which is crucial for identifying OS-specific vulnerabilities and planning targeted exploits.

BMap the network of We-are-secure Inc.

Mapping the network involves determining the network range and identifying active systems, which the question states has already been performed as part of the initial information gathering.

CInstall a backdoor to log in remotely on the We-are-secure server.

Installing a backdoor is an exploitation or post-exploitation activity, which occurs much later in the ethical hacking process after vulnerabilities have been identified and exploited.

DFingerprint the services running on the we-are-secure network.

Fingerprinting services running on open ports is a part of identifying open ports and applications, which the question states has already been completed.

Concept tested: Ethical hacking methodology - Enumeration

Source: https://csrc.nist.gov/publications/detail/sp/800-115/final

Topics

#Penetration Testing#Ethical Hacking#Enumeration#OS Fingerprinting

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice