PCCET Question #194: Real Exam Question with Answer & Explanation

Question

Which method is used to enumerate vulnerabilities, services, and applications?

Options

• APort evasion
• BEncryption
• CDNS tunneling
• DPort scanning

Explanation

This question asks for the method used to discover and list vulnerabilities, services, and applications on a target.

Common mistakes.

• A. Port evasion refers to techniques used to bypass port-based security controls, not to enumerate services or vulnerabilities.
• B. Encryption is a method of securing data confidentiality and integrity, not a technique for discovering services or vulnerabilities.
• C. DNS tunneling is a technique used for data exfiltration or command and control over DNS, not for initial enumeration of services or vulnerabilities.

Concept tested. Network reconnaissance techniques

Reference. https://learn.microsoft.com/en-us/azure/security-center/security-center-vulnerability-assessment-recommendations

No community discussion yet for this question.