A company has contracted with a network security firm to help identify the vulnerabilities of the corporate network. The firm sends a team to perform penetration tests to the company network. Why would the team use applications such as Nmap, SuperScan, and Angry IP Scanner?
- to detect installed tools within files and directories that provide threat actors remote access and control over a computer or network
- to detect any evidence of a hack or malware in a computer or network
- to reverse engineer binary files when writing exploits and when analyzing malware
- to probe network devices, servers, and hosts for open TCP or UDP ports
Explanation: Applications such as Nmap, SuperScan, and Angry IP Scanner are classified as network scanning tools. During a penetration test, these tools are used to perform reconnaissance by probing network devices, servers, and hosts to identify active IP addresses and discover which TCP or UDP ports are open. This information helps security professionals determine which services are running and locate potential entry points into the network.
Related exam: Enterprise Networking, Security, and Automation ( Version 7.00) - ENSA Final Exam
