nerdexam
GIAC

GCFA · Question #164

An attacker attempts to gain information about a network by specifically targeting the network resources and applications running on a computer. This method for gaining information is known as ______.

The correct answer is C. Enumeration. Enumeration is the active process of extracting detailed information from target systems, such as network resources, user accounts, and running applications.

Threat Hunting & Timeline Analysis

Question

An attacker attempts to gain information about a network by specifically targeting the network resources and applications running on a computer. This method for gaining information is known as ______.

Options

  • ANotification
  • BScanning
  • CEnumeration
  • DSensor
  • EFootprinting
  • FPassive response

How the community answered

(27 responses)
  • B
    4% (1)
  • C
    81% (22)
  • D
    11% (3)
  • F
    4% (1)

Why each option

Enumeration is the active process of extracting detailed information from target systems, such as network resources, user accounts, and running applications.

ANotification

Notification is not a recognized offensive cybersecurity technique for gathering network information.

BScanning

Scanning refers to probing a network to discover open ports and live hosts, not specifically targeting resources and applications to extract detailed system information.

CEnumerationCorrect

Enumeration is a phase of network reconnaissance where an attacker actively queries and interacts with target systems to extract specific details such as user names, shared resources, running services, and application versions. Unlike footprinting, enumeration involves direct engagement with network resources and applications, making it a more targeted and intrusive information-gathering technique.

DSensor

Sensor is a monitoring/detection device or component, not an information-gathering attack method.

EFootprinting

Footprinting is a broader, often passive reconnaissance phase focused on gathering general information about a target (domain, IP ranges, organization details) before specific targeting occurs.

FPassive response

Passive response is not a standard term for an offensive information-gathering methodology in cybersecurity.

Concept tested: Network enumeration as active reconnaissance technique

Source: https://learn.microsoft.com/en-us/security/compass/privileged-access-overview

Topics

#enumeration#network reconnaissance#information gathering#active scanning

Community Discussion

No community discussion yet for this question.

Full GCFA Practice