nerdexam
GIAC

GCIH · Question #537

What type of activity is occurring in the screenshot?

The correct answer is D. A war dialing scan. War dialing is the automated sequential dialing of telephone number ranges to discover modems, fax machines, and other dial-up-connected systems, which is the activity depicted in the screenshot.

Reconnaissance, Scanning, and Enumeration

Question

What type of activity is occurring in the screenshot?

Exhibit

GCIH question #537 exhibit

Options

  • AMapping VoIP devices
  • BEnumerating SIP devices
  • CA modem spoofing attack
  • DA war dialing scan

How the community answered

(49 responses)
  • A
    4% (2)
  • B
    2% (1)
  • D
    94% (46)

Why each option

War dialing is the automated sequential dialing of telephone number ranges to discover modems, fax machines, and other dial-up-connected systems, which is the activity depicted in the screenshot.

AMapping VoIP devices

Mapping VoIP devices involves scanning IP network ranges using SIP or RTP protocols to discover VoIP phones and PBX systems, which is IP-network-based and unrelated to dialing telephone numbers.

BEnumerating SIP devices

Enumerating SIP devices targets the Session Initiation Protocol over IP networks to discover endpoints and servers, not dial-up telephone lines on the public switched telephone network.

CA modem spoofing attack

Modem spoofing is an attack where a device impersonates a legitimate modem to intercept or manipulate a dial-up session, which is a different action from the scanning and discovery activity shown in the screenshot.

DA war dialing scanCorrect

War dialing uses automated software to dial through a range of telephone numbers and logs which numbers are answered by modems or other data equipment, allowing an attacker to identify undocumented or unmonitored dial-up entry points into an organization. The screenshot shows this sequential scanning and response logging behavior, which is the defining characteristic of war dialing as a reconnaissance technique against PSTN-connected infrastructure.

Concept tested: War dialing scan identification and PSTN reconnaissance

Source: https://owasp.org/www-community/attacks/War_Dialing

Topics

#war dialing#modem scanning#telephone reconnaissance#legacy enumeration

Community Discussion

No community discussion yet for this question.

Full GCIH Practice