PT0-002 · Question #176
A Chief Information Security Officer wants a penetration tester to evaluate whether a recently installed firewall is protecting a subnetwork on which many decades- old legacy systems are connected…
The correct answer is D. The type of scan. The most important consideration before scanning a subnetwork with legacy systems is the type of scan. Aggressive scan options - such as full TCP connect scans, version detection (-sV), or OS fingerprinting (-O) - can send probe traffic that crashes or locks up old, fragile…
Question
A Chief Information Security Officer wants a penetration tester to evaluate whether a recently installed firewall is protecting a subnetwork on which many decades- old legacy systems are connected. The penetration tester decides to run an OS discovery and a full port scan to identify all the systems and any potential vulnerability. Which of the following should the penetration tester consider BEFORE running a scan?
Options
- AThe timing of the scan
- BThe bandwidth limitations
- CThe inventory of assets and versions
- DThe type of scan
How the community answered
(29 responses)- A3% (1)
- B17% (5)
- C10% (3)
- D69% (20)
Explanation
The most important consideration before scanning a subnetwork with legacy systems is the type of scan. Aggressive scan options - such as full TCP connect scans, version detection (-sV), or OS fingerprinting (-O) - can send probe traffic that crashes or locks up old, fragile systems that lack the processing capacity to handle unexpected input. The tester should choose a slower, less intrusive scan type (e.g., a basic SYN or ICMP sweep) to reduce the risk of outages. Timing (A) and bandwidth (B) matter but are secondary. Asset inventory (C) is part of what the scan itself will reveal, so it cannot be a prerequisite.
Topics
Community Discussion
No community discussion yet for this question.