ETHICAL HACKING 2.1.3 EXAM QUESTIONS AND ANSWERS 100% CORRECT!!

Heather is performing a penetration test. She has gathered a lot of valuable information about her target already. Heather has used some hacking tools to determine that, on her target network, a computer named Production Workstation has port 445 open. Which step in the ethical hacking methodology is Heather performing? Scanning and enumeration Gain access Maintain access Reconnaissance - ANSWER Scanning and enumeration Scanning is the second phase in the ethical hacking methodology. The hacker uses various tools to gather in-depth information about the network, computer systems, live systems, open ports, and more. Extracting information such as usernames, computer names, network resources, shares, and services is known as enumeration. Enumeration is a part of the Scanning step. Reconnaissance is the first phase in the ethical hacking methodology. The hacker begins gathering information about their target. This can include gathering publicly available information, using social engineering techniques, or dumpster diving. Gaining access is the third phase in the ethical hacking methodology. In this phase, the hacker uses all the information gathered through reconnaissance and scanning and then exploits vulnerabilities to gain access. Maintaining access is the fourth phase in the ethical hacking methodology. Once the hacker has gained access, he can use backdoors, rootkits, or Trojans to establish permanent access to the system. The penetration testing life cycle is a common methodology used when performing a penetration test. This methodology is almost identical to the ethical hacking methodology. Which of the following is the key difference between these methodologies? Gain access Reconnaissance Maintain access Reporting - ANSWER Reporting The only difference between the penetration testing life cycle and ethical hacking methodology is the focus on the documentation of the penetration test. A detailed report of the tests performed and everything that was discovered is important to a penetration test. Reconnaissance, gaining access, and maintaining access are all steps in both methodologies.