CISA Exam QuestionsBrowse all questions from this exam

CISA Exam - Question 387


Which of the following security assessment techniques attempts to exploit a system's open ports?

Show Answer
Correct Answer: B

Penetration testing is a security assessment technique that attempts to exploit a system's open ports. Its purpose is to identify vulnerabilities by actively attempting to exploit them, simulating the actions of an attacker. This can include testing for weaknesses in the configuration or vulnerabilities associated with the services running on those ports.

Discussion

9 comments
Sign in to comment
MOHAMMADSALTIOption: C
Jan 7, 2023

It is c as network scanning is one phase of penetration testing

Forever25Option: B
Oct 14, 2022

Can someone explain why the correct answer is B? Network scanning doesn`t exploits ports, it just identifies them. Pentest is using for exploiting

zebreeOption: B
Feb 4, 2023

"Network scanning" is not the technique that attempts to exploit a system's open ports. The technique that attempts to exploit a system's open ports is "Penetration testing".

3008Option: C
May 1, 2023

'network scanning' is first hacking tech, and second 'Vulnerability scanning' is going tech

JulianleehkOption: B
Nov 26, 2022

should be B

peeluOption: B
Dec 10, 2022

B. Penetration testing

PakawatOption: B
May 15, 2023

Pen Test

starzuuOption: B
Aug 3, 2023

"exploit" is the key word here.

shalota2Option: B
May 31, 2024

Network Scanning is the part of Penetration Testing. Gathering information like open ports, service running on these ports and much more but is not used for exploits. So I think the answer here is A. Penetration Testing is that type of testing when you try to exploits the vulnerabilities such as common open ports.