GCIH · Question #537
What type of activity is occurring in the screenshot?
The correct answer is D. A war dialing scan. War dialing is the automated sequential dialing of telephone number ranges to discover modems, fax machines, and other dial-up-connected systems, which is the activity depicted in the screenshot.
Question
What type of activity is occurring in the screenshot?
Exhibit
Options
- AMapping VoIP devices
- BEnumerating SIP devices
- CA modem spoofing attack
- DA war dialing scan
How the community answered
(49 responses)- A4% (2)
- B2% (1)
- D94% (46)
Why each option
War dialing is the automated sequential dialing of telephone number ranges to discover modems, fax machines, and other dial-up-connected systems, which is the activity depicted in the screenshot.
Mapping VoIP devices involves scanning IP network ranges using SIP or RTP protocols to discover VoIP phones and PBX systems, which is IP-network-based and unrelated to dialing telephone numbers.
Enumerating SIP devices targets the Session Initiation Protocol over IP networks to discover endpoints and servers, not dial-up telephone lines on the public switched telephone network.
Modem spoofing is an attack where a device impersonates a legitimate modem to intercept or manipulate a dial-up session, which is a different action from the scanning and discovery activity shown in the screenshot.
War dialing uses automated software to dial through a range of telephone numbers and logs which numbers are answered by modems or other data equipment, allowing an attacker to identify undocumented or unmonitored dial-up entry points into an organization. The screenshot shows this sequential scanning and response logging behavior, which is the defining characteristic of war dialing as a reconnaissance technique against PSTN-connected infrastructure.
Concept tested: War dialing scan identification and PSTN reconnaissance
Source: https://owasp.org/www-community/attacks/War_Dialing
Topics
Community Discussion
No community discussion yet for this question.
