How is the scanning phase best described?

• A. Privilege escalation
• B. Creating exploit scripts
• C. The process of finding openings such as internet gateways, available systems, listening ports, and vulnerability lists
• D. Social engineering

Answer: (C)

Scanning is the phase where you map what’s reachable on the network: you identify live hosts, open ports, the services listening on those ports, and any obvious vulnerabilities or misconfigurations. This discovery work creates a picture of the attack surface and helps you decide where to focus subsequent testing, such as vulnerability assessment or exploitation attempts. It’s about gathering actionable information to plan the next steps, not about gaining higher privileges or writing exploits yet, and not about manipulating people. In practice, you’d use scanning tools to perform network discovery, port scanning, service version detection, and vulnerability checks to build a baseline of targets and potential entry points.