ISC2 Exam CSSLP Topic 10 Question 78 Discussion

Actual exam question for ISC2's CSSLP exam

Question #: 78
Topic #: 10

John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. In order to do so, he performs the following steps of the pre-attack phase successfully: Information gathering Determination of network range Identification of active systems

Location of open ports and applications Now, which of the following tasks should he perform next?

APerform OS fingerprinting on the We-are-secure network.

BMap the network of We-are-secure Inc.

CInstall a backdoor to log in remotely on the We-are-secure server.

DFingerprint the services running on the we-are-secure network.

Show Suggested Answer

Suggested Answer: A

The Biba model is a formal state transition system of computer security policy that describes a set of access control rules

designed to ensure data integrity. Data and subjects are grouped into ordered levels of integrity. The model is designed so that subjects may

not corrupt data in a level ranked higher than the subject, or be corrupted by data from a lower level than the subject.

by Becky at Dec 26, 2023, 04:47 PM

Limited Time Offer

25%

Off

Get Premium CSSLP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Pok

2 days ago

Option D is the way to go. Fingerprinting the services will give me a comprehensive understanding of the target's attack surface. Gotta love a good network mapping exercise!

upvoted 0 times

...

Willetta

3 days ago

Haha, I'm with Vicki on this one. Trying to backdoor the server? That's like cheating on a test - totally defeats the purpose of being an ethical hacker. Stick to the script, John!

upvoted 0 times

...

Vicki

8 days ago

Whoa, hold on! Installing a backdoor? That's crossing the line, buddy. I'm an ethical hacker, not a black hat. Option C is definitely not the way to go.

upvoted 0 times

...

Nada

12 days ago

Performing OS fingerprinting on the target network is the logical next step. It will help me understand the vulnerabilities and plan my attack strategy more effectively.

upvoted 0 times

...

Rosina

12 days ago

I believe mapping the network of We-are-secure Inc. would also be a good next step to understand the network better.

upvoted 0 times

...

Willis

13 days ago

I agree with Nu. OS fingerprinting will help John gather more information about the network.

upvoted 0 times

...

Nu

14 days ago

I think John should perform OS fingerprinting on the We-are-secure network next.

upvoted 0 times

...

Michel

18 days ago

I believe mapping the network of We-are-secure Inc. would also be a good next step to understand the network better.

upvoted 0 times

...

Lashon

23 days ago

I agree with Nell. OS fingerprinting will help John gather more information about the network.

upvoted 0 times

...

Nell

24 days ago

I think John should perform OS fingerprinting on the We-are-secure network next.

upvoted 0 times

...