In cybersecurity, enumeration refers to which activity?

• A. Scanning network ranges for open ports.
• B. The process of extracting information about a target system or network.
• C. Encrypting communications for secure transmission.
• D. Performing vulnerability scanning.

Answer: (B)

The asked concept is about extracting information from a target. Enumeration is the phase where you gather detailed data from a system or network after initial discovery. It goes beyond simply seeing that something exists; it digs into what the system is, what it runs, and who can access it.

In practice, enumeration pulls out specifics like user accounts and group memberships, computer names, network shares, service versions, OS details, and authentication methods. For example, you might query a Windows system to enumerate users, groups, and available shares, or query directory services and SNMP to learn about devices, accounts, and configurations. This focused information gathering helps map the target’s potential attack surface and plan follow-on steps.

This is distinct from port scanning, which only identifies open ports; vulnerability scanning, which looks for known weaknesses; and encryption, which protects data in transit. Enumeration’s purpose is to reveal actionable details about the target’s structure and resources.