Question

As you being to perform the network-mapping phase of the scenario, you have been asked what the difference between scanning and enumeration is.

Take this opportunity to discuss the following:

• Describe the processes of scanning and enumeration.
• What do they entail, and what is the desired outcome?
• In addition, research and recommend at least 2 scanning and enumeration tools that your organization could use.

Answer 1

Answer)
Scanning and enumeration are two different ways of fighting to attack and hacking. Scanning also is known as widely port scanning is the process where we can connect to the TCP and UDP ports for finding the services and applications which are open on the target device. Here using scanning the applications and services can be discovered and also many information can be gathered and determined to target any vulnerabilities and weaknesses in the system.
Enumeration is the process using which we can find what are the services which are running, versions, open shares, account details and also the possible points for the entry. Enumeration can be used in hacking or to be secured against hacking when the user can make appropriate security amendments to be secured from the attacks and thus enumeration reveals what all information is being widely discovered.
2 scanning tools are Nmap, Xprobe2
2 Enumeration tools are Dumpsec, Winfo