nerdexam
GIAC

GPEN · Question #1

Which of the following are the scanning methods used in penetration testing? Each correct answer represents a complete solution. Choose all that apply.

The correct answer is A. Vulnerability B. Port C. Network. Penetration testing employs vulnerability, port, and network scanning as its three recognized scanning method categories. Services enumeration is a sub-activity of these methods, not a standalone category.

Security Testing Methodologies

Question

Which of the following are the scanning methods used in penetration testing? Each correct answer represents a complete solution. Choose all that apply.

Options

  • AVulnerability
  • BPort
  • CNetwork
  • DServices

How the community answered

(52 responses)
  • A
    73% (38)
  • D
    27% (14)

Why each option

Penetration testing employs vulnerability, port, and network scanning as its three recognized scanning method categories. Services enumeration is a sub-activity of these methods, not a standalone category.

AVulnerabilityCorrect

Vulnerability scanning systematically probes systems for known weaknesses using tools like Nessus or OpenVAS, making it a core pen testing scanning method.

BPortCorrect

Port scanning discovers open TCP/UDP ports on target hosts using tools like Nmap, revealing potential entry points for exploitation.

CNetworkCorrect

Network scanning maps live hosts, topology, and infrastructure across a target network, providing the foundational reconnaissance layer of a penetration test.

DServices

Services is not a distinct scanning category - service detection and enumeration are performed as part of port scanning (e.g., Nmap -sV), not a separate method.

Concept tested: Penetration testing scanning method categories

Source: https://www.eccouncil.org/train-certify/certified-ethical-hacker-ceh/

Topics

#penetration testing#vulnerability scanning#port scanning#network scanning

Community Discussion

No community discussion yet for this question.

Full GPEN Practice