Which term describes the method of intrusive probing used to gather information such as user lists, routing tables, security flaws, and SNMP data?

Which term describes the method of intrusive probing used to gather information such as user lists, routing tables, security flaws, and SNMP data?

• A. Discovery
• B. Reconnaissance
• C. Enumeration
• D. Intrusion Enumeration

Answer: (C)

Enumeration is the active, intrusive probing phase where you interact with the target to pull detailed information such as user lists, group memberships, routing tables, installed services, security weaknesses, and SNMP data. This step goes beyond simply identifying that a host exists or what services are running; it aims to reveal specific data and configurations that could be used to deepen access or plan an exploit. Techniques include protocol queries (like SNMP walks), account and group enumeration, banner grabbing on services, and querying directories or registries to extract usable details. This level of detail distinguishes enumeration from reconnaissance or discovery, which are broader information-gathering stages that map out the environment but don’t always yield the granular, system-specific data described. The term Intrusion Enumeration isn’t a standard label for this phase.

Enumeration is the active, intrusive probing phase where you interact with the target to pull detailed information such as user lists, group memberships, routing tables, installed services, security weaknesses, and SNMP data. This step goes beyond simply identifying that a host exists or what services are running; it aims to reveal specific data and configurations that could be used to deepen access or plan an exploit. Techniques include protocol queries (like SNMP walks), account and group enumeration, banner grabbing on services, and querying directories or registries to extract usable details. This level of detail distinguishes enumeration from reconnaissance or discovery, which are broader information-gathering stages that map out the environment but don’t always yield the granular, system-specific data described. The term Intrusion Enumeration isn’t a standard label for this phase.