GCIH · Question #249
Network mapping provides a security testing team with a blueprint of the organization. Which of the following steps is NOT a part of manual network mapping?
The correct answer is D. Performing Neotracerouting. Manual network mapping relies on passive and semi-active reconnaissance steps; automated or tool-specific operations like Neotracerouting fall outside this manual process.
Question
Network mapping provides a security testing team with a blueprint of the organization. Which of the following steps is NOT a part of manual network mapping?
Options
- AGathering private and public IP addresses
- BCollecting employees information
- CBanner grabbing
- DPerforming Neotracerouting
How the community answered
(37 responses)- A3% (1)
- B5% (2)
- C3% (1)
- D89% (33)
Why each option
Manual network mapping relies on passive and semi-active reconnaissance steps; automated or tool-specific operations like Neotracerouting fall outside this manual process.
Gathering private and public IP addresses is a standard manual network mapping step performed through WHOIS lookups, ARIN queries, and DNS enumeration.
Collecting employee information is a valid manual mapping activity using OSINT sources such as LinkedIn, corporate websites, and job postings to build an organizational profile.
Banner grabbing is a manual technique where a tester connects to open ports and reads service banners to identify software versions and operating systems running on target hosts.
Neotracerouting refers to using NeoTrace, a graphical automated traceroute tool, which is an active automated scanning operation rather than a manual mapping step. Manual network mapping focuses on gathering data through human-driven processes such as querying WHOIS, collecting IP ranges, banner grabbing, and OSINT on employees, not running automated route-tracing utilities.
Concept tested: Manual network mapping steps and scope
Source: https://owasp.org/www-project-web-security-testing-guide/stable/6-Appendix/E-History
Topics
Community Discussion
No community discussion yet for this question.