nerdexam
GIAC

GCIH · Question #235

Which of the following options scans the networks for vulnerabilities regarding the security of a network?

The correct answer is C. Network enumerators. Network enumerators are tools that probe a network infrastructure to gather information about hosts, services, and security weaknesses across the network.

Reconnaissance, Scanning, and Enumeration

Question

Which of the following options scans the networks for vulnerabilities regarding the security of a network?

Options

  • ASystem enumerators
  • BPort enumerators
  • CNetwork enumerators
  • DVulnerability enumerators

How the community answered

(24 responses)
  • A
    8% (2)
  • B
    4% (1)
  • C
    88% (21)

Why each option

Network enumerators are tools that probe a network infrastructure to gather information about hosts, services, and security weaknesses across the network.

ASystem enumerators

System enumerators gather detailed information from a specific host, such as user accounts, shares, and OS details, rather than scanning an entire network for vulnerabilities.

BPort enumerators

Port enumerators specifically identify open ports and associated services on individual hosts, not the broader security posture of a network.

CNetwork enumeratorsCorrect

Network enumerators operate at the network level to systematically scan and collect information about the entire network, including identifying hosts, open services, and potential security vulnerabilities in the network infrastructure. Unlike host-focused tools, network enumerators assess the security posture of the network as a whole. Examples include tools like Nessus and OpenVAS which enumerate network-wide vulnerabilities.

DVulnerability enumerators

Vulnerability enumerators is not a standard classification in network security tooling - the accepted term for tools that scan networks for security weaknesses is network enumerators or vulnerability scanners.

Concept tested: Network enumeration for security vulnerability scanning

Source: https://owasp.org/www-community/controls/Network_Scanning_Tools

Topics

#network enumeration#vulnerability scanning#network security assessment

Community Discussion

No community discussion yet for this question.

Full GCIH Practice