CSSLP: Certified Secure Software Lifecycle ProfessionalDemo

By ISC · Question Mode

QuestionQ22

Secure Software Testing

John is a professional ethical hacker assigned to test the security of www.we-are-secure.com. He has successfully completed these pre-attack-phase steps:

  • Information gathering
  • Determining the network range
  • Identifying active systems
  • Locating open ports and applications

Which task should he perform next?

  • A Perform OS fingerprinting on the We-are-secure network.
  • B Map the network of We-are-secure Inc.
  • C Install a backdoor to log in remotely on the We-are-secure server.
  • D Fingerprint the services running on the we-are-secure network.
Explanation

Service fingerprinting examines the services exposed on discovered open ports to determine their identities, versions, and related details. This information supports later vulnerability identification and exploitation planning. Network mapping is an earlier discovery activity, while installing a backdoor is a post-exploitation action.

Community Discussion

No comments yet. Be the first to start the discussion!