CSSLP: Certified Secure Software Lifecycle Professional

By ISC · Question Mode

QuestionQ22

VerifiedSecure Software Testing

John is a professional ethical hacker assigned to test the security of www.we-are-secure.com. He has successfully completed these pre-attack-phase steps:

  • Information gathering
  • Determining the network range
  • Identifying active systems
  • Locating open ports and applications

Which task should he perform next?

Explanation

Service fingerprinting examines the services exposed on discovered open ports to determine their identities, versions, and related details. This information supports later vulnerability identification and exploitation planning. Network mapping is an earlier discovery activity, while installing a backdoor is a post-exploitation action.

Community Discussion

No comments yet. Be the first to start the discussion!