MENU
John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. In order to do so, he performs the following steps of the pre-attack phase successfully: Information gathering Determination of network range Identification of active systems
Location of open ports and applications Now, which of the following tasks should he perform next?
Suggested Answer: A
Get Premium CSSLP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
The Biba model is a formal state transition system of computer security policy that describes a set of access control rules
designed to ensure data integrity. Data and subjects are grouped into ordered levels of integrity. The model is designed so that subjects may
not corrupt data in a level ranked higher than the subject, or be corrupted by data from a lower level than the subject.
34 comments · newest first
CA
Carmela
11 months ago
Not sure if OS fingerprinting is the best move here...
SH
Shanda
11 months ago
I agree, fingerprinting services is crucial for the next phase.
PO
Polly
11 months ago
Wait, installing a backdoor? That's illegal, right?
SU
Sueann
11 months ago
Mapping the network sounds like a solid next step too!
GE
Gerald
11 months ago
I think he should definitely perform OS fingerprinting next.
NO
Novella
12 months ago
Installing a backdoor seems really risky and unethical, even in a testing scenario. I don't think that's something John should do at this stage.
TI
Tish
12 months ago
I definitely recall a practice question where we had to choose between OS fingerprinting and service fingerprinting. I think service fingerprinting is more specific to the applications running, which could be more useful.
BU
Buck
12 months ago
I'm a bit unsure about whether mapping the network or fingerprinting services comes first. I think both are important, but I feel like mapping might give a better overall picture.
CO
Cortney
1 year ago
I remember we discussed the importance of OS fingerprinting in our last class. It helps identify the operating systems running on the network, which is crucial for the next steps.
MY
Myra
1 year ago
Okay, let me think this through step-by-step. We've already done information gathering, determined the network range, and identified active systems. Now we need to dig deeper into the services and applications running on the network. I think fingerprinting the services is the way to go.
BR
Brent
1 year ago
Installing a backdoor? No way, that's way too risky and not something an ethical hacker should do. I'm pretty sure the right answer is to fingerprint the services running on the network.
LO
Loreta
1 year ago
Hmm, I'm a bit unsure here. Mapping the network could also be a good next step to get a better understanding of the overall system. I'll have to think this through carefully.
LE
Lemuel
1 year ago
This seems like a straightforward question. I think the next logical step would be to perform OS fingerprinting on the We-are-secure network.
KA
Kati
1 year ago
I'm leaning towards option C, since the file is posted to a record, so users with access to that record should be able to view the file by default.
NI
Nikita
1 year ago
I think the key here is to focus on the word "customizable." That's the important detail we need to identify the right components. Let me go through each option and consider which ones can be customized.
SH
Sherita
1 year ago
Hmm, I'm a bit unsure about this one. I know governance and security controls are important, but I'm not sure which of these options would be the right answer. I'll have to think it through step-by-step.
PO
Pok
1 year ago
Option D is the way to go. Fingerprinting the services will give me a comprehensive understanding of the target's attack surface. Gotta love a good network mapping exercise!
FE
Fernanda
1 year ago
Kanisha: Absolutely, knowing the services running will help us identify potential vulnerabilities to exploit.
FR
Freeman
1 year ago
User 3: It's important to have a clear picture of the services in order to plan the attack effectively.
KA
Kanisha
1 year ago
User 2: Agreed, mapping the network and identifying the services running will give us valuable information for the next steps.
KA
Kanisha
1 year ago
User 1: Option D is definitely the right choice. Fingerprinting the services is crucial for understanding the attack surface.
WI
Willetta
1 year ago
Haha, I'm with Vicki on this one. Trying to backdoor the server? That's like cheating on a test - totally defeats the purpose of being an ethical hacker. Stick to the script, John!
VI
Vicki
1 year ago
Whoa, hold on! Installing a backdoor? That's crossing the line, buddy. I'm an ethical hacker, not a black hat. Option C is definitely not the way to go.
JE
Jerlene
1 year ago
B) Map the network of We-are-secure Inc.
TA
Taryn
1 year ago
User 2: Yeah, we should stick to ethical hacking practices.
PA
Paulene
1 year ago
A) Perform OS fingerprinting on the We-are-secure network.
JU
Justine
1 year ago
User 1: I agree, installing a backdoor is unethical.
NA
Nada
1 year ago
Performing OS fingerprinting on the target network is the logical next step. It will help me understand the vulnerabilities and plan my attack strategy more effectively.
RO
Rosina
1 year ago
I believe mapping the network of We-are-secure Inc. would also be a good next step to understand the network better.
WI
Willis
2 years ago
I agree with Nu. OS fingerprinting will help John gather more information about the network.
NU
Nu
2 years ago
I think John should perform OS fingerprinting on the We-are-secure network next.
MI
Michel
2 years ago
I believe mapping the network of We-are-secure Inc. would also be a good next step to understand the network better.
LA
Lashon
2 years ago
I agree with Nell. OS fingerprinting will help John gather more information about the network.
NE
Nell
2 years ago
I think John should perform OS fingerprinting on the We-are-secure network next.