Question

List and describe the required tools needed for an effective assessment. What are some common mistakes and errors that occur when preparing for a security assessment?

Answer 1

Some of the required tools for the effective assessment are :

1. Nmap : It scans at TCP level and works well with remote devices to create the audit report.

2. OpenVAS : It performs two important works , scanning and management ,It is very stable and has built in GUI

3. Wireshark : It helps to manage the network by testing IP addresses, spoofed packets, unnecessary packet drops etc and has very good GUI

4. Metaspolit : It works for anti forensics, and has open source framework.

The common errors while preparing for security assessment are:

1. Non involvement of team members for assessment with practical knowledge

2. Involvement of experts no knowledge of risk assessment process

3. Lack of proper vision