A library IT lead treats a quick top-ports scan as the complete enumeration plan for an engagement. How should the tester correct that view?
Select an answer to reveal the explanation.
Short Explanation
Top-ports is the express lane, not the whole highway map. It gets you moving fast on common services, but critical boxes may still hide important listeners on less common ports. Start smart, then widen where it counts.
Full Explanation
Default or top-ports scans efficiently surface common services early in enumeration. They are a tactic, not proof that the attack surface is fully mapped—especially on high-value assets that may expose uncommon listeners. Completing a default profile without follow-up can miss scope-relevant services. Password spraying is not a substitute for port coverage decisions.