Which of the following Penetration Testing steps includes network mapping and OS fingerprinting?
Suggested Answer: A
Get Premium GPEN Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
MI
Mica
11 months ago
Sounds right, but I feel like it could fit in other stages too.
GR
Gracia
11 months ago
A is correct! OS fingerprinting is crucial for gathering info.
AR
Arlene
12 months ago
Wait, are you sure? I thought that was part of the planning stage.
TA
Talia
12 months ago
Totally agree, network mapping is key in that step!
BA
Barbra
12 months ago
It's definitely A, that's where you gather all the intel.
FA
Fabiola
1 year ago
I feel like I've seen something similar before, and it seems like option A makes the most sense for those activities.
MA
Marvel
1 year ago
I remember a practice question that mentioned these steps being crucial for identifying targets, so I would lean towards option A.
LE
Leah
1 year ago
I think network mapping and OS fingerprinting are part of the information gathering phase, but I'm not completely sure.
SC
Scarlet
1 year ago
I’m a bit confused because I thought the planning stage was more about setting up the test rather than gathering info.
SI
Simona
1 year ago
Hmm, this is a tough one. I'm leaning towards the smart card option, as it seems like the most secure and practical solution given the high traffic and need to control access. The other choices don't really address the core issue of unauthorized access to patient records. I'll have to think this through carefully.
SH
Shanice
1 year ago
I've got a good feeling about this one. The description of "recognizing that the ultimate goal of inspection is the safety and reliability of operating facilities" makes me think the answer is Rcm, or Reliability-Centered Maintenance. That sounds like the most relevant approach here.
JU
Justine
1 year ago
I remember we discussed something about alternative funding methods, but I'm not entirely sure which one applies here. It feels like it could be the minimum-premium plan, but the details are fuzzy.