exam questions

Exam CS0-003 All Questions

View all questions & answers for the CS0-003 exam

Exam CS0-003 topic 1 question 377 discussion

Actual exam question from CompTIA's CS0-003
Question #: 377
Topic #: 1
[All CS0-003 Questions]

A security analyst needs to identify services in a small, critical infrastructure ICS network. Many components in the network are likely to break if they receive malformed or unusually large requests. Which of the following is the safest method to use when identifying service versions?

  • A. Use nmap -sV to identify all assets on the network.
  • B. Use Burp Suite to conduct service identification.
  • C. Use nc to manually perform banner grabbing.
  • D. Use Nessus with restricted concurrent connections.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
noa808a
2 weeks, 6 days ago
Selected Answer: D
The best answer is D, as nessus is an automated tool that guarantees requests will not be malformed.
upvoted 1 times
...
f90ecff
3 weeks ago
Selected Answer: C
Nessus can be tuned for sensitive environments — and in some ICS contexts, it’s appropriate with the right care. But in terms of safest possible method, especially when you don’t know how fragile the systems are, the manual approach (nc) remains best.
upvoted 1 times
...
Jolly_7
3 weeks, 2 days ago
Selected Answer: D
Use Nessus with restricted concurrent connections.
upvoted 2 times
...
[Removed]
2 months, 1 week ago
Selected Answer: D
Nessus with restricted concurrent connections means configuring Nessus to limit the number of simultaneous connections it makes to the target systems during a scan. This is important for avoiding overwhelming sensitive systems, particularly in environments like critical infrastructure or ICS (Industrial Control Systems), where services may break or become unstable if they receive too many requests at once or requests that are too large.
upvoted 3 times
...
exitbob
2 months, 3 weeks ago
Selected Answer: C
Manual banner grabbing with netcat (nc) lets the analyst send minimal, carefully crafted inputs to elicit a service banner. This minimizes the risk of accidentally sending a request that could disrupt operations.
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago