Scanning and enumeration in Cybersecurity - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is the main purpose of scanning in cybersecurity?

Scanning is used to discover live hosts, open ports, and services on a network to identify potential targets for further analysis.

beginner

Define enumeration in the context of cybersecurity.

Enumeration is the process of gathering detailed information about network resources, users, shares, and services after scanning has identified potential targets.

intermediate

How does scanning differ from enumeration?

Scanning identifies live systems and open ports, while enumeration digs deeper to extract detailed information like usernames, network shares, and service versions.

beginner

Name two common tools used for scanning and enumeration.

Nmap is widely used for scanning networks and ports. Tools like NetBIOS enumeration tools or SNMPwalk are used for enumeration to gather detailed network information.

intermediate

Why is scanning and enumeration important in penetration testing?

They help identify vulnerabilities by mapping the network and gathering detailed information, which guides the tester to exploit weaknesses effectively.

What does scanning primarily detect in a network?

A Live hosts and open ports

B User passwords

C Malware infections

D Firewall rules

Scanning is focused on finding live devices and open ports to understand the network layout.

Which process involves gathering usernames and network shares?

A Scanning

B Phishing

C Exploitation

D Enumeration

Enumeration collects detailed information like usernames and shares after scanning identifies targets.

Which tool is commonly used for network scanning?

A Wireshark

B Metasploit

C Nmap

D John the Ripper

Nmap is a popular tool for scanning networks and discovering open ports.

What is the next step after scanning in a penetration test?

A Enumeration

B Reporting

C Exploitation

D Password cracking

After scanning identifies targets, enumeration gathers detailed information about them.

Why should scanning and enumeration be done carefully?

A They delete important files

B They can alert network defenders

C They always cause system crashes

D They are illegal in all cases

Scanning and enumeration can trigger alerts, so they must be done cautiously to avoid detection.

Explain the difference between scanning and enumeration in cybersecurity.

Think about what each step discovers about the network.

Describe why scanning and enumeration are important steps in penetration testing.

Consider how these steps help a tester understand the network.