Which statement best describes enumeration as used in security testing?

• A. Scanning the network for open ports.
• B. Exfiltrating data from the target.
• C. The process of extracting information about a target system or network.
• D. Performing a denial of service test.

Answer: (C)

Enumeration focuses on extracting information about a target system or network beyond what a basic scan reveals. It’s about turning discovered hosts and services into a detailed map of what actually exists and who or what can access it. This includes gathering user names and group memberships, machine names, shared resources, services and versions, and configuration details such as SNMP communities or DNS records. Those details help an attacker or tester understand potential footholds, plan a targeted approach, and assess risk.

This is different from simply scanning, which mainly identifies open ports and active services but doesn’t dive into the identities, resources, and configurations that enumeration surfaces. It’s also not about taking data from the target (exfiltration) or testing capacity to overwhelm the target (denial of service); those are different security testing activities with distinct goals.