Which of the hacking methodology steps can be used to identify the applications and vendors used?
Suggested Answer: B
Get Premium ICS-SCADA Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
OSINT (Open Source Intelligence) refers to the collection and analysis of information gathered from public, freely available sources to be used in an intelligence context. In the context of hacking methodologies, OSINT can be used to identify applications and vendors employed by a target organization by analyzing publicly available data such as websites, code repositories, social media, and other internet-facing resources. Reference:
Michael Bazzell, 'Open Source Intelligence Techniques'.
12 comments · newest first
RO
Ronald
2 months ago
Scanning is useful, but OSINT gives broader insights into vendors.
AM
Amber
2 months ago
Enumeration makes sense too. It can reveal specific details about apps.
BE
Bette
2 months ago
I think OSINT is the best choice. It gathers info from public sources.
MO
Mohammad
2 months ago
Scanning could work too, but not as effectively as OSINT.
DE
Demetra
2 months ago
I agree with Salena, OSINT is key here!
FR
Freida
3 months ago
Wait, can you really find vendors with just OSINT? Sounds too easy.
NY
Nydia
3 months ago
I think A) Enumeration is also a good choice.
SA
Salena
3 months ago
Definitely B) OSINT for that!
KI
Kimbery
3 months ago
I practiced a similar question, and I believe OSINT was the answer there as well. It makes sense for identifying vendors too.
SO
Sophia
3 months ago
Scanning seems like it could be relevant too, but I feel like it’s more about identifying open ports rather than specific applications.
EL
Elfriede
3 months ago
I'm not entirely sure, but I remember something about enumeration being used to gather details about services and applications.
ER
Erick
4 months ago
I think OSINT might be the right choice since it involves gathering publicly available information about applications and vendors.