Exam PT0-002 topic 1 question 154 discussion

Actual exam question from CompTIA's PT0-002

Question #: 154
Topic #: 1

A consultant just performed a SYN scan of all the open ports on a remote host and now needs to remotely identify the type of services that are running on the host. Which of the following is an active reconnaissance tool that would be BEST to use to accomplish this task?

A. tcpdump
B. Snort
C. Nmap
D. Netstat
E. Fuzzer

Show Suggested Answer

Suggested Answer: C 🗳️

by RRabbit_111 at Jan. 22, 2023, 6:11 p.m.

Comments

Submit Cancel

RRabbit_111

Highly Voted 11 months, 2 weeks ago

Selected Answer: C

C. Nmap Nmap (Network Mapper) is a widely used active reconnaissance tool that can be used to remotely identify the type of services that are running on a host. It can map the host's open ports and attempt to identify the service running on each port. Nmap can also be used to discover the operating system, device type and other information of the host. A. Tcpdump is a packet sniffer that captures and analyzes network traffic, it's not used for identifying the service running on a host. B. Snort is an intrusion detection system that analyzes network traffic, it's not used for identifying the service running on a host. D. Netstat is a command-line tool that displays network connections, routing tables, and interface statistics, it's not used for identifying the service running on a host. E. Fuzzer is a tool that is used to find security vulnerabilities by sending malformed or unexpected inputs to a program, it's not used for identifying the service running on a host.

upvoted 7 times

...