Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

EC-Council ICS-SCADA Exam - Topic 3 Question 47 Discussion

Posted by Loreen on Jul 17, 2026 at 06:24 PM

Which of the hacking methodology steps can be used to identify the applications and vendors used?

Suggested Answer: B

OSINT (Open Source Intelligence) refers to the collection and analysis of information gathered from public, freely available sources to be used in an intelligence context. In the context of hacking methodologies, OSINT can be used to identify applications and vendors employed by a target organization by analyzing publicly available data such as websites, code repositories, social media, and other internet-facing resources. Reference:

Michael Bazzell, 'Open Source Intelligence Techniques'.


Get Premium ICS-SCADA Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
12 comments · newest first
RO
Ronald 2 months ago
Scanning is useful, but OSINT gives broader insights into vendors.
AM
Amber 2 months ago
Enumeration makes sense too. It can reveal specific details about apps.
BE
Bette 2 months ago
I think OSINT is the best choice. It gathers info from public sources.
MO
Mohammad 2 months ago
Scanning could work too, but not as effectively as OSINT.
DE
Demetra 2 months ago
I agree with Salena, OSINT is key here!
FR
Freida 3 months ago
Wait, can you really find vendors with just OSINT? Sounds too easy.
NY
Nydia 3 months ago
I think A) Enumeration is also a good choice.
SA
Salena 3 months ago
Definitely B) OSINT for that!
KI
Kimbery 3 months ago
I practiced a similar question, and I believe OSINT was the answer there as well. It makes sense for identifying vendors too.
SO
Sophia 3 months ago
Scanning seems like it could be relevant too, but I feel like it’s more about identifying open ports rather than specific applications.
EL
Elfriede 3 months ago
I'm not entirely sure, but I remember something about enumeration being used to gather details about services and applications.
ER
Erick 4 months ago
I think OSINT might be the right choice since it involves gathering publicly available information about applications and vendors.
0/2000 characters

Save Cancel