CSSLP · Question #28
John works as a professional Ethical Hacker. He has been assigned the project of testing the attack phase successfully: Information gathering Determination of network range Identification of active…
The correct answer is A. Perform OS fingerprinting on the We-are-secure network. After identifying active systems and open ports, the ethical hacker should next perform OS fingerprinting to determine the operating systems in use.
Question
John works as a professional Ethical Hacker. He has been assigned the project of testing the attack phase successfully: Information gathering Determination of network range Identification of active systems Location of open ports and applications Now, which of the following tasks should he perform next?
Options
- APerform OS fingerprinting on the We-are-secure network.
- BMap the network of We-are-secure Inc.
- CInstall a backdoor to log in remotely on the We-are-secure server.
- DFingerprint the services running on the we-are-secure network.
How the community answered
(61 responses)- A72% (44)
- B3% (2)
- C8% (5)
- D16% (10)
Why each option
After identifying active systems and open ports, the ethical hacker should next perform OS fingerprinting to determine the operating systems in use.
OS fingerprinting is the next logical step after identifying active systems and open ports because it determines the specific operating systems running on target machines, which is crucial for identifying OS-specific vulnerabilities and planning targeted exploits.
Mapping the network involves determining the network range and identifying active systems, which the question states has already been performed as part of the initial information gathering.
Installing a backdoor is an exploitation or post-exploitation activity, which occurs much later in the ethical hacking process after vulnerabilities have been identified and exploited.
Fingerprinting services running on open ports is a part of identifying open ports and applications, which the question states has already been completed.
Concept tested: Ethical hacking methodology - Enumeration
Source: https://csrc.nist.gov/publications/detail/sp/800-115/final
Topics
Community Discussion
No community discussion yet for this question.