nerdexam
GIAC

GCIH · Question #249

Network mapping provides a security testing team with a blueprint of the organization. Which of the following steps is NOT a part of manual network mapping?

The correct answer is D. Performing Neotracerouting. Manual network mapping relies on passive and semi-active reconnaissance steps; automated or tool-specific operations like Neotracerouting fall outside this manual process.

Reconnaissance, Scanning, and Enumeration

Question

Network mapping provides a security testing team with a blueprint of the organization. Which of the following steps is NOT a part of manual network mapping?

Options

  • AGathering private and public IP addresses
  • BCollecting employees information
  • CBanner grabbing
  • DPerforming Neotracerouting

How the community answered

(37 responses)
  • A
    3% (1)
  • B
    5% (2)
  • C
    3% (1)
  • D
    89% (33)

Why each option

Manual network mapping relies on passive and semi-active reconnaissance steps; automated or tool-specific operations like Neotracerouting fall outside this manual process.

AGathering private and public IP addresses

Gathering private and public IP addresses is a standard manual network mapping step performed through WHOIS lookups, ARIN queries, and DNS enumeration.

BCollecting employees information

Collecting employee information is a valid manual mapping activity using OSINT sources such as LinkedIn, corporate websites, and job postings to build an organizational profile.

CBanner grabbing

Banner grabbing is a manual technique where a tester connects to open ports and reads service banners to identify software versions and operating systems running on target hosts.

DPerforming NeotraceroutingCorrect

Neotracerouting refers to using NeoTrace, a graphical automated traceroute tool, which is an active automated scanning operation rather than a manual mapping step. Manual network mapping focuses on gathering data through human-driven processes such as querying WHOIS, collecting IP ranges, banner grabbing, and OSINT on employees, not running automated route-tracing utilities.

Concept tested: Manual network mapping steps and scope

Source: https://owasp.org/www-project-web-security-testing-guide/stable/6-Appendix/E-History

Topics

#network mapping#banner grabbing#IP enumeration#manual reconnaissance

Community Discussion

No community discussion yet for this question.

Full GCIH Practice