GIAC
GPEN · Question #484
You have been contracted to penetration test an e-mail server for a client that wants to know for sure if the sendmail service is vulnerable to any known attacks. You have permission to run any type…
Sign in or unlock GPEN to reveal the answer and full explanation for question #484. The question stem and answer options stay visible for context.
Vulnerability Discovery & Scanning
Question
You have been contracted to penetration test an e-mail server for a client that wants to know for sure if the sendmail service is vulnerable to any known attacks. You have permission to run any type of test, how will you proceed to give the client the most valid answer?
Options
- ARun all known sendmail exploits against the server and see if you can compromisethe service,
- BRun a banner grabbing vulnerability checker to determine the sendmail version andpatch
- CRun all sendmail exploits that will not crash the server and see if you cancompromise the
- DLog into the e-mail and determine the sendmail version and patch level, then lookup and
Unlock GPEN to see the answer
You've previewed enough free GPEN questions. Unlock GPEN for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#exploit validation#sendmail#service vulnerability testing#safe exploitation