SY0-501 · Question #484
A remote intruder wants to take inventory of a network so exploits can be researched. The intruder is looking for information about software versions on the network. Which of the following techniques
The correct answer is A. Banner grabbing. Banner grabbing is a reconnaissance technique used by attackers to collect software version and service information from network hosts by reading the banners returned by services upon connection.
Question
A remote intruder wants to take inventory of a network so exploits can be researched. The intruder is looking for information about software versions on the network. Which of the following techniques is the intruder using?
Options
- ABanner grabbing
- BPort scanning
- CPacket sniffing
- DVirus scanning
How the community answered
(31 responses)- A74% (23)
- B16% (5)
- C6% (2)
- D3% (1)
Why each option
Banner grabbing is a reconnaissance technique used by attackers to collect software version and service information from network hosts by reading the banners returned by services upon connection.
Banner grabbing involves connecting to a network service (such as FTP, HTTP, SSH, or SMTP) and reading the response header or banner that the service sends back, which often contains the software name, version, and operating system details. This information allows attackers to identify vulnerable software versions and research applicable exploits. It is a passive-to-active reconnaissance method specifically aimed at enumerating software and service information.
Port scanning identifies which ports are open on a host to determine what services are running, but does not inherently reveal software version information from service banners.
Packet sniffing captures network traffic in transit to analyze data, credentials, or communications, and is not specifically targeted at collecting software version information from services.
Virus scanning is a defensive technique used to detect malware on a system and is not a reconnaissance method used by attackers to gather network inventory information.
Concept tested: Banner grabbing for software version reconnaissance
Source: https://attack.mitre.org/techniques/T1592/
Topics
Community Discussion
No community discussion yet for this question.