A municipal SOC asks for the high-level stages of a professional penetration test in sound order. Which sequence best reflects standard methodology flow?
Select an answer to reveal the explanation.
Short Explanation
You map the neighborhood before you try doors, and you write it down before you leave. Recon and enumeration build the picture; analysis and careful exploitation test paths; post-ex and reporting finish the job. Jumping straight to exploitation is backwards theater.
Full Explanation
Professional penetration testing generally progresses from information gathering through enumeration and vulnerability analysis before controlled exploitation and post-exploitation, concluding with reporting. Skipping recon or treating reporting as an afterthought undermines evidence quality and client value. Patching production or destroying logs is not a methodology stage. The sequence teaches discipline rather than requiring a trademarked framework name.