exam questions

Exam PT0-001 All Questions

View all questions & answers for the PT0-001 exam

Exam PT0-001 topic 1 question 190 discussion

Actual exam question from CompTIA's PT0-001
Question #: 190
Topic #: 1
[All PT0-001 Questions]

A penetration tester ran an Nmap scan against a target and received the following output:

Which of the following commands would be best for the penetration tester to execute NEXT to discover any weaknesses or vulnerabilities?

  • A. onesixtyone ג€"d 192.168.121.1
  • B. enum4linux ג€"w 192.168.121.1
  • C. snmpwalk ג€"c public 192.168.121.1
  • D. medusa ג€"h 192.168.121.1 ג€"U users.txt ג€"P passwords.txt ג€"M ssh
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
catastrophie
Highly Voted 3 years, 11 months ago
I'm going with B as well. Reasons are: 1. snmpwalk uses UDP port 161 (SNMP) which isn't listed 2. onesityone another SNMP attack that uses port 161 3. medusa is a brute force tool. enum4linux - SMB enumeration tool uses ports 445 and 139 (both listed as opened)
upvoted 6 times
...
miabe
Most Recent 2 years, 10 months ago
Selected Answer: B
looks good to me
upvoted 1 times
...
t_bob
3 years, 1 month ago
Selected Answer: B
it use port 445 and 139 (both opened)
upvoted 1 times
...
casandre123
3 years, 7 months ago
enum4linux in a windows machine? msrpc? That's gotta be something new!
upvoted 1 times
Zdanypentest
3 years, 3 months ago
Enum4linux is a tool for enumerating information from Windows and Samba systems.
upvoted 2 times
cuernov
3 years, 1 month ago
enum4linux work also on linux machine. Enum4linux is an enumeration tool capable of detecting and extracting data from Windows and Linux operating systems, including those that are Samba (SMB) hosts on a network.
upvoted 1 times
...
...
...
MrRiver
3 years, 8 months ago
i think the "Correct Answer" was choosen by a Random Number Generator. so assuming 4 Answers , arround 25% of the answers will be correct ...
upvoted 3 times
...
CybeSecN
3 years, 9 months ago
The answer is B https://tools.kali.org/information-gathering/enum4linux
upvoted 2 times
...
carlo479
3 years, 10 months ago
B. this was on the exam
upvoted 2 times
...
x0hmei
3 years, 11 months ago
Agreed B enum4linux just not 100% sure on ip addy in place of the workgroup with that -w flag. But as far as I know no SNMP 161 open cant use A or C then.
upvoted 1 times
...
hellobob
3 years, 12 months ago
Also like to add because port 445 is open can perform share enumeration from this following tool.
upvoted 2 times
...
hellobob
3 years, 12 months ago
Discovering any weaknesses or vulnerabilities should be enum4linux. This can still be used among windows machines to evaluate vulnerabilities
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...