nerdexam
(ISC)2

CSSLP · Question #4

Which of the following penetration testing techniques automatically tests every phone line in an exchange and tries to locate modems that are attached to the network?

The correct answer is A. Demon dialing. Demon dialing is a penetration testing technique that automatically scans phone lines to locate active modems, which can serve as unauthorized entry points into a network.

Secure Software Testing

Question

Which of the following penetration testing techniques automatically tests every phone line in an exchange and tries to locate modems that are attached to the network?

Options

  • ADemon dialing
  • BSniffing
  • CSocial engineering
  • DDumpster diving

How the community answered

(24 responses)
  • A
    88% (21)
  • B
    8% (2)
  • C
    4% (1)

Why each option

Demon dialing is a penetration testing technique that automatically scans phone lines to locate active modems, which can serve as unauthorized entry points into a network.

ADemon dialingCorrect

Demon dialing, also known as war dialing, is a technique where an attacker uses a computer program to automatically dial a range of telephone numbers. The purpose is to identify which numbers answer with a modem tone, indicating a potential connection point to a network or system that could be exploited.

BSniffing

Sniffing involves capturing and analyzing network traffic to inspect data packets, not dialing phone lines.

CSocial engineering

Social engineering is manipulating individuals to divulge confidential information or perform actions, rather than technical scanning of phone lines.

DDumpster diving

Dumpster diving involves sifting through trash to find discarded documents or media containing sensitive information, not scanning phone lines.

Concept tested: War dialing / Demon dialing

Source: https://www.techopedia.com/definition/7010/war-dialing

Topics

#Penetration Testing Techniques#War Dialing#Reconnaissance

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice