CompTIA PenTest+ (PT0-002) — Question 314

A penetration testing firm performs an assessment every six months for the same customer. While performing network scanning for the latest assessment, the penetration tester observes that several of the target hosts appear to be residential connections associated with a major television and ISP in the area. Which of the following is the most likely reason for the observation?

Answer options

• A. The penetration tester misconfigured the network scanner.
• B. The network scanning tooling is not functioning properly.
• C. The IP ranges changed ownership.
• D. The network scanning activity is being blocked by a firewall.

Correct answer: C

Explanation

The correct answer is C because it is common for IP address ownership to change over time, particularly as ISPs reallocate their resources. Options A and B suggest issues with the scanning process itself, which are less likely given the context. Option D would imply that the results are being obstructed, but the observation of residential connections indicates a change in ownership rather than a blockage.