SANS560 GIAC Penetration Tester (GPEN) Practice Test

In large networks, scanning every host and every port wastes time, bandwidth, and analysis effort. The most efficient approach is to limit the scope and focus on a representative subset of hosts and ports. By targeting critical assets, typical or high-risk host groups, and the most relevant services, you can gather meaningful security insights without overwhelming resources. This sampling approach lets you infer broader network risk, prioritize remediation, and iterate—with the option to expand the scope later if needed. The other options either demand an impractical, network-wide sweep, rely on bypass techniques that aren’t legitimate, or ignore the technical assessment entirely, making them unsuitable for scalable, effective testing.