GCFA · Question #164
An attacker attempts to gain information about a network by specifically targeting the network resources and applications running on a computer. This method for gaining information is known as ______.
The correct answer is C. Enumeration. Enumeration is the active process of extracting detailed information from target systems, such as network resources, user accounts, and running applications.
Question
An attacker attempts to gain information about a network by specifically targeting the network resources and applications running on a computer. This method for gaining information is known as ______.
Options
- ANotification
- BScanning
- CEnumeration
- DSensor
- EFootprinting
- FPassive response
How the community answered
(27 responses)- B4% (1)
- C81% (22)
- D11% (3)
- F4% (1)
Why each option
Enumeration is the active process of extracting detailed information from target systems, such as network resources, user accounts, and running applications.
Notification is not a recognized offensive cybersecurity technique for gathering network information.
Scanning refers to probing a network to discover open ports and live hosts, not specifically targeting resources and applications to extract detailed system information.
Enumeration is a phase of network reconnaissance where an attacker actively queries and interacts with target systems to extract specific details such as user names, shared resources, running services, and application versions. Unlike footprinting, enumeration involves direct engagement with network resources and applications, making it a more targeted and intrusive information-gathering technique.
Sensor is a monitoring/detection device or component, not an information-gathering attack method.
Footprinting is a broader, often passive reconnaissance phase focused on gathering general information about a target (domain, IP ranges, organization details) before specific targeting occurs.
Passive response is not a standard term for an offensive information-gathering methodology in cybersecurity.
Concept tested: Network enumeration as active reconnaissance technique
Source: https://learn.microsoft.com/en-us/security/compass/privileged-access-overview
Topics
Community Discussion
No community discussion yet for this question.