MENU
Which of the following tasks is NOT performed into the enumeration phase?
Suggested Answer: C
Get Premium GPEN Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
15 comments · newest first
CA
Cary
11 months ago
I thought NULL sessions were outdated, but I guess not!
KI
Kirk
11 months ago
A and D are legit enumeration tasks.
EL
Elenor
11 months ago
Wait, injecting a backdoor? That sounds sketchy!
BA
Barney
11 months ago
Totally agree, C is more of an attack phase.
MA
Margurite
11 months ago
C is definitely not part of enumeration.
TE
Teddy
12 months ago
I think I read that enumeration is about gathering data, so C seems like the odd one out. But I’m not completely confident in that.
NO
Noah
12 months ago
I feel like I might be mixing up the phases. I know discovering NetBIOS names and querying are definitely enumeration, but I can't recall if NULL sessions are also part of that.
DO
Doug
12 months ago
I practiced a similar question where we had to identify tasks in different phases of penetration testing. I think injecting a backdoor is more of an exploitation phase task, not enumeration.
RO
Rose
1 year ago
I remember that enumeration is all about gathering information, so I think options A, B, and D fit that phase. But I'm not sure about C.
EL
Elfrieda
1 year ago
Wait, I'm a little confused. Isn't establishing NULL sessions and queries part of the enumeration process? I'm not sure if that's the right answer or not. I'll have to double-check my notes on the different phases of the attack lifecycle.
PA
Pamella
1 year ago
Okay, I've got this. The enumeration phase is all about information gathering, so anything involving actually compromising the system, like injecting a backdoor, would be outside of that. I'm confident C is the correct answer.
AL
Aleisha
1 year ago
Hmm, I'm a bit unsure about this one. I know the enumeration phase is about reconnaissance, but I'm not totally clear on where the line is drawn between that and gaining access. Let me think this through carefully.
MA
Matthew
1 year ago
This one seems pretty straightforward. The enumeration phase is all about gathering information, so injecting a backdoor wouldn't be part of that.
JU
Justine
1 year ago
Okay, I've got a strategy here. Since the requirement is to return data in different formats and enforce security protocols, I think the best approach is to handle that at the second tier where the business logic is implemented. That way, the first tier can focus on the systems of engagement, and the third tier can focus on the systems of record.
MA
Marleen
1 year ago
Okay, I think I've got this. The key is to reduce the resource's access privileges to the minimum required for the developer role, which means going from Read Only to No Access. Option A looks like the right answer.