exam questions

Exam 200-201 All Questions

View all questions & answers for the 200-201 exam

Exam 200-201 topic 1 question 293 discussion

Actual exam question from Cisco's 200-201
Question #: 293
Topic #: 1
[All 200-201 Questions]



Refer to the exhibit. An attacker scanned the server using Nmap. What did the attacker obtain from this scan?

  • A. Identified a firewall device preventing the port state from being returned.
  • B. Identified open SMB ports on the server.
  • C. Gathered information on processes running on the server.
  • D. Gathered a list of Active Directory users.
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
pdrafs
Highly Voted 1 year, 5 months ago
Selected Answer: A
Answer is A. Filtered state means that the firewall hides the state of the service
upvoted 7 times
...
itsony
Highly Voted 1 year, 5 months ago
Agreed with A, filtered means there's a firewall in the organization
upvoted 5 times
...
d503c75
Most Recent 7 months, 3 weeks ago
A is correct. Filtered: Nmap cannot determine whether the port is open because packet filtering prevents its probes from reaching the port. The filtering could be from a dedicated firewall device, router rules, or host-based firewall software. https://wiki.onap.org/display/DW/Nmap
upvoted 1 times
...
stickerbombmaster
1 year, 1 month ago
Selected Answer: A
Filtered means that a firewall, filter, or other network obstacle is blocking the port so that Nmap cannot tell whether it is open or closed. Closed ports have no application listening on them, though they could open up at any time From OMAP page
upvoted 1 times
...
Silexis
1 year, 3 months ago
Selected Answer: C
This is just another tricky question where both A and C can be valid. I have choosen C because when the port is Filtered, an ICMP unreachable error is sent back. From the result we can see that there is nothing for other ports included in scan (for ex TCP 135) which means that the only reason those appeared with Filtered is because the services are running and a firewall was configured to protect those services. BUT the reason for scan itself is to discover the services running in order to weaponize something against them.
upvoted 1 times
...
CCNPTT
1 year, 5 months ago
Selected Answer: A
Obviously A.
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago