What is the purpose of manual vulnerability identification techniques in addition to automated scanning?

To identify vulnerabilities that automated scanners may miss and to reduce false positives

To eliminate the need for a vulnerability scanner

To replace automated scanning entirely

To speed up the scanning process

A penetration tester is conducting an external assessment and has identified a web application that uses a content delivery network (CDN) to protect its origin server. The tester wants to bypass the CDN to find the origin server's IP address for further testing. Which technique is most effective?

Use a web application firewall (WAF) bypass technique

Send a request with a modified Host header to the CDN

Perform a port scan on the CDN's IP addresses

Search historical DNS records for the domain

GIAC Certified Enterprise Defender

Domain 4Objective 2

Penetration Testing Application GCED Practice Questions (Page 10)

Part of the Penetration Testing domain, which makes up ~18% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~13–22 in this domain), expect 7–11 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)

47questions here

10free pages

7concepts

Questions 46–47

46foundation · easy
What is the purpose of manual vulnerability identification techniques in addition to automated scanning?
Select an answer first
47expert · hard
A penetration tester is conducting an external assessment and has identified a web application that uses a content delivery network (CDN) to protect its origin server. The tester wants to bypass the CDN to find the origin server's IP address for further testing. Which technique is most effective?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GCED

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCED” is a trademark of its owner, used for identification only.

Penetration Testing Application GCED Practice Questions (Page 10)

Questions 46–47

What is the purpose of manual vulnerability identification techniques in addition to automated scanning?

A penetration tester is conducting an external assessment and has identified a web application that uses a content delivery network (CDN) to protect its origin server. The tester wants to bypass the CDN to find the origin server's IP address for further testing. Which technique is most effective?

Keep studying — Penetration Testing