A county assessor asks why enumeration is not the same as exploitation during a CPTS-style engagement. What is the clearest distinction?
Select an answer to reveal the explanation.
Short Explanation
Enumeration is taking inventory of doors, locks, and windows. Exploitation is carefully checking whether a weak lock actually opens under permission. Counting hinges is not the same as walking inside.
Full Explanation
Enumeration gathers detailed information about hosts, services, shares, users, and other attack-surface details. Exploitation attempts to use weaknesses to achieve unauthorized access or impact within authorized scope. Treating the terms as synonyms hides how far the tester went and what was proven. Ordering exploitation before enumeration reverses sound methodology.