Exam SY0-601 topic 1 question 256 discussion

Nmap -sV flag detects the (s)ervice (V)ersion on what you are scanning Source: personal pentesting experience

Option C, "nmap comptia.org -p 80 -sV", would work BEST to help identify potential vulnerabilities. This command performs a port scan on the web server (port 80 is used for HTTP) and identifies the software and version running on the server (using the "-sV" flag). This information can be used to determine if the software is outdated and if there are known vulnerabilities associated with that version. Option A, "hping3 -S comptia-org -p 80", sends a SYN packet to the specified host and port to test if the host is listening on that port. This is not specifically designed to identify potential vulnerabilities. Option B, "nc -l -v comptia.org -p 80", listens on port 80 for incoming connections. This is not designed to identify potential vulnerabilities. Option D, "nslookup –port=80 comptia.org", performs a DNS lookup on the specified host and port. This is not designed to identify potential vulnerabilities.

C. nmap -sV gets version information

The best option for identifying potential vulnerabilities on the hosted web servers is to use the "nmap" tool with the "-p" and "-sV" options. The command "nmap comptia.org -p 80 -sV" will scan the target domain "comptia.org" on port 80 (the default HTTP port) and use version detection ("-sV") to determine the software and its version running on that port. Nmap is a powerful network scanning tool that can help identify open ports, services, and their versions on a target system. By using version detection, the organization can determine if the web server software is up-to-date or if there are known vulnerabilities associated with the specific version in use. This information can help the organization prioritize software updates and patching to address any potential security issues.

C. nmap comptia.org -p 80 -sV nmap scans for open networks and its used for vulnerability checking and security auditing

Nmap -sV flag detects the (s)ervice (V)ersion on what you are scanning Source: personal pentesting experience

Nmap on port 80