Authorized testers chain a weak DMZ host, stolen credentials, and a misconfigured jump path to reach an internal municipal database that scanners listed only as separate medium findings. What identification method primarily demonstrated the combined exploitable path?
Select an answer to reveal the explanation.
Short Explanation
Scanners hand you a grocery list of mediums; a pentest shows how those items become a recipe into the database. Authorized chaining on the DMZ is identification of real attack paths, not unauthorized password spraying or deleting findings.
Full Explanation
Penetration testing supplements vulnerability scanning by attempting controlled exploitation and path chaining under rules of engagement. It can reveal that individually medium findings combine into a critical path into internal systems. Unauthorized attacks, deleting findings, or antivirus counts alone do not provide the same exploitability insight for vulnerability management.