nerdexam
GIAC

GCIH · Question #233

Which of the following is a process of searching unauthorized modems?

The correct answer is B. Wardialing. Wardialing is the automated technique of dialing large sequences of telephone numbers to discover modems, fax machines, or remote access systems.

Reconnaissance, Scanning, and Enumeration

Question

Which of the following is a process of searching unauthorized modems?

Options

  • AEspionage
  • BWardialing
  • CSystem auditing
  • DScavenging

How the community answered

(32 responses)
  • A
    3% (1)
  • B
    94% (30)
  • C
    3% (1)

Why each option

Wardialing is the automated technique of dialing large sequences of telephone numbers to discover modems, fax machines, or remote access systems.

AEspionage

Espionage refers to the covert gathering of secret or confidential information, typically for intelligence or competitive purposes, and is not a specific technical scanning technique.

BWardialingCorrect

Wardialing uses software to automatically dial large blocks of phone numbers and records which numbers respond with modem carrier tones, allowing an attacker or auditor to discover unauthorized or rogue modems connected to an organization's internal network. It was classically used to find entry points that bypass perimeter firewalls by exploiting forgotten dial-up connections.

CSystem auditing

System auditing is a formal, structured review of IT systems to assess security controls and policy compliance, not a method for discovering unauthorized modems.

DScavenging

Scavenging involves searching through discarded or leftover data and physical materials (similar to dumpster diving) to recover sensitive information, not locating modems.

Concept tested: Wardialing for unauthorized modem discovery

Source: https://www.sans.org/white-papers/wardialing-technique-finds-unauthorized-modems-880/

Topics

#wardialing#unauthorized modems#reconnaissance#dial-up scanning

Community Discussion

No community discussion yet for this question.

Full GCIH Practice