Question

A company has hired a consulting firm to conduct penetration testing on their network. As the PenTest team begins testing, they notice significant network traffic to and from a private IP address they do not recognize.

What should be their next step?

answer

Conduct host discovery to identify other potential targets and vulnerabilities.


Conduct edge discovery to identify other potential targets and vulnerabilities.


Conduct network discovery to identify other potential targets and vulnerabilities.


Conduct a passive discovery to identify potential vulnerabilities.

Answer 1

The most appropriate next step for the PenTest team in this scenario is:

**Conduct network discovery to identify other potential targets and vulnerabilities.**

Network discovery will allow the team to gather more information about the network, identify devices, and understand the relationships and communications occurring within the network, especially concerning the unidentified private IP address. This step helps uncover any potential vulnerabilities associated with those devices and aids in understanding the overall network structure.