Study. uk . com
  1. Home
  2. All questions
  3. Question 368

CISSP study material · question 368 of 500

A team wants to enumerate live hosts, the services they expose and the weaknesses those services may carry. Which family of SP 800-115 techniques covers this work, and how is it usually performed?

  1. Non-technical techniques, usually performed by walkthrough.
  2. Target vulnerability validation, usually performed manually.
  3. Target identification and analysis, usually performed with automated tools.
  4. Review techniques, usually performed manually.
Show the answer

Answer: C. Target identification and analysis, usually performed with automated tools.

Target identification and analysis techniques - network discovery, port and service identification, vulnerability scanning, wireless scanning and application security examination - may be manual but are generally automated.

Source: NIST SP 800-115 (NIST) — SP 800-115 > 2.2 Technical Assessment Techniques

Challenge yourself on this topic → Study as cards