Define enumeration in the context of penetration testing.

• A. Random probing.
• B. Deleting data on the target.
• C. Systematic extraction of information from a target, such as usernames, shares, services, and configurations, to build a map for exploitation.
• D. Generating passwords.

Answer: (C)

Enumeration in penetration testing is the deliberate, systematic gathering of information about a target to reveal its attack surface. After identifying live hosts and open ports, you dig deeper to collect details like usernames, user groups, shares, services, configurations, and installed resources. This builds a clear map of what’s present and how it’s connected, helping you identify weaknesses to exploit or privilege-escalation paths. It’s distinct from random probing, which is unsystematic, from deleting data, which is destructive, and from generating passwords, which creates credentials rather than revealing existing information.