nerdexam
(ISC)2

SSCP · Question #27

Which of the following is NOT a technique used to perform a penetration test?

The correct answer is A. traffic padding. Traffic padding is a defensive countermeasure that injects dummy data into communications to obscure traffic patterns and frustrate traffic analysis attacks. It is a protection technique, not an offensive penetration testing technique. Scanning and probing (port/vulnerability…

Submitted by helene.fr· Apr 18, 2026Security Operations and Administration

Question

Which of the following is NOT a technique used to perform a penetration test?

Options

  • Atraffic padding
  • Bscanning and probing
  • Cwar dialing
  • Dsniffing

How the community answered

(28 responses)
  • A
    89% (25)
  • B
    4% (1)
  • D
    7% (2)

Explanation

Traffic padding is a defensive countermeasure that injects dummy data into communications to obscure traffic patterns and frustrate traffic analysis attacks. It is a protection technique, not an offensive penetration testing technique. Scanning and probing (port/vulnerability scanning), war dialing (automated scanning of phone numbers for modems), and sniffing (capturing network traffic) are all standard reconnaissance and data-gathering techniques used during a penetration test.

Topics

#Penetration Testing#Security Testing#Network Reconnaissance#Traffic Analysis

Community Discussion

No community discussion yet for this question.

Full SSCP Practice