PT0-003: CompTIA PenTest+Demo

By CompTIA · Question Mode

QuestionQ77

Reconnaissance and Enumeration

A penetration tester is assessing offline systems that control a power plant and is seeking vulnerabilities observable in the network stack. The rules of engagement prohibit the tester from interacting with production systems. Which tool or technique should the tester use for this assessment?

  • A Port mirroring
  • B Storyboarding
  • C Write blocker
  • D SAST tool
Explanation

Port mirroring passively duplicates network traffic to a monitoring interface for inspection. It enables network-stack analysis without actively probing, transmitting to, or otherwise interacting with production systems.

Community Discussion

No comments yet. Be the first to start the discussion!