A city asks whether banner grabbing is hacking or enumeration. How should the tester classify it?
Select an answer to reveal the explanation.
Short Explanation
Reading the sign on the shop window is enumeration, not smashing the register. Banners and service replies often spill versions and sloppy configs. That intel shapes what you check next — it is not the whole break-in.
Full Explanation
Collecting banners and informative service responses is a classic enumeration activity. The data frequently reveals product versions, modules, or misconfigurations useful for prioritization. It is not equivalent to proving exploitation or achieving domain compromise. Dismissing banners as irrelevant understates common information-disclosure risk.