CISSP-ISSMP: Information Systems Security Management ProfessionalDemo

Question

Which penetration-testing phase includes reconnaissance or data gathering?

A Attack phase
B Pre-attack phase
C Post-attack phase
D Out-attack phase

Explanation

Reconnaissance and data gathering are conducted before active exploitation to identify targets, technologies, potential entry points, and relevant environmental details. They are part of the pre-attack phase.

CISSP-ISSMP: Information Systems Security Management ProfessionalDemo

AstroTutor

Notes

Readiness

QuestionQ34

Community Discussion