In the context of network penetration testing, which of the following BEST describes the purpose of pivoting?

• A. Pivoting allows a pentester to access and exploit vulnerabilities in network segments that are not directly accessible from the initial point of compromise.
• B. Pivoting increases external attack surface.
• C. Pivoting reduces network traversal.
• D. Pivoting only applies to wireless networks.

Answer: (A)

Pivoting in network pentesting is the technique of using a compromised host as a bridge to reach other devices and services that are not directly accessible from your starting point. Once you have a foothold inside the target network, you tunnel or route traffic through that host to explore and assess internal segments, effectively testing how well the network is segmented and how well internal controls defend against lateral movement.

This description fits best because it emphasizes moving beyond the initial point of compromise to access parts of the network that were previously unreachable, which is the essence of pivoting. It doesn’t describe widening the external attack surface, nor does it imply reducing traversal; in fact, pivoting facilitates traversal within the internal network. It also applies to any network, not just wireless, since the concept hinges on using an internal foothold to reach additional targets.