nerdexam
GIAC

GCIH · Question #77

In which of the following attacks does the attacker gather information to perform an access attack?

The correct answer is B. Reconnaissance attack. Reconnaissance attacks are the information-gathering phase of a larger attack strategy, used to identify targets and vulnerabilities before launching an access attack.

Reconnaissance, Scanning, and Enumeration

Question

In which of the following attacks does the attacker gather information to perform an access attack?

Options

  • ALand attack
  • BReconnaissance attack
  • CVulnerability attack
  • DDoS attack

How the community answered

(53 responses)
  • A
    4% (2)
  • B
    89% (47)
  • C
    2% (1)
  • D
    6% (3)

Why each option

Reconnaissance attacks are the information-gathering phase of a larger attack strategy, used to identify targets and vulnerabilities before launching an access attack.

ALand attack

A land attack is a specific denial-of-service attack that sends a packet with identical source and destination IP addresses, causing the target to loop - it does not gather information.

BReconnaissance attackCorrect

A reconnaissance attack involves techniques such as ping sweeps, port scans, and packet sniffing to collect information about a target network or system. This gathered intelligence is then used to plan and execute a subsequent access attack. It is the preparatory phase that precedes exploitation.

CVulnerability attack

A vulnerability attack exploits a known weakness to gain access, but it is not the phase where the attacker gathers information about the target.

DDoS attack

A DoS attack disrupts availability of a service or system and is not used to collect information for planning an access attack.

Concept tested: Reconnaissance attack as information-gathering phase

Source: https://www.cisco.com/c/en/us/td/docs/security/security_management/cisco_security_manager/security_manager/4-1/user/guide/CSMUserGuide_wrapper/plcyfw.html

Topics

#reconnaissance attack#information gathering#attack phases#access attacks

Community Discussion

No community discussion yet for this question.

Full GCIH Practice