Exam CFR-310 topic 1 question 37 discussion

B. Scanning Explanation: Scanning is the attack phase where an attacker probes the target network for open ports, services, and vulnerabilities. A request to port 1433 (commonly used by Microsoft SQL Server) over the network is typically seen during this phase, as the attacker is looking for open or vulnerable services to exploit. Why the other answers are incorrect: A. Reconnaissance: Involves gathering information without interacting directly with the network or system. Scanning, on the other hand, involves sending requests, such as the one to port 1433. C. Gaining access: Refers to the phase where the attacker is exploiting a vulnerability or using credentials to gain unauthorized access, not probing for open ports. D. Persistence: Involves maintaining access to a compromised system, but it doesn’t involve the active probing of ports.