You have been asked to perform a black box penetration test for a medium-sized
organization that sells imported motorcycles and ATVs online. In which phase of this
assessment will you likely spend most of your time?
A. Information gathering and vulnerability identification
Answers
Answered by
1
Answer:
Domain 2: Information Gathering and Vulnerability Identification
 2.1 Given a scenario, conduct information gathering using appropriate techniques.
Scanning
Enumeration
Hosts
Networks
Domains
Users
Groups
Network shares
Web pages
Applications
Services
Tokens
Social networking sites
Packet crafting
Packet inspection
Fingerprinting
Cryptography
Certificate inspection
Eavesdropping
RF communication monitoring
Sniffing
Wired
Wireless
Decompilation
Debugging
Open Source Intelligence Gathering
Sources of research
CERT
NIST
JPCERT
CAPEC
Full disclosure
CVE
CWE
Similar questions