1. Home
2. All questions
3. Question 384

CISSP study material · question 384 of 500

A tester records that a web server runs a particular product version by reading what the service returns on connection. What is this technique called, and which enumeration methods are generally available only from inside?

• Security assessment

1. Sniffing; certificate inspection is generally an internal technique.
2. Fuzzing; credential harvesting is generally an internal technique.
3. Fingerprinting; port scanning is generally an internal technique.
4. Banner grabbing; enumeration of Windows shares and directory services is generally an internal technique.

Challenge yourself on this topic → Study as cards