Exam 312-50v10 topic 1 question 144 discussion

Actual exam question from ECCouncil's 312-50v10

Question #: 144
Topic #: 1

A Security Engineer at a medium-sized accounting firm has been tasked with discovering how much information can be obtained from the firm's public facing web servers. The engineer decides to start by using netcat to port 80.
The engineer receives this output:

HTTP/1.1 200 OK -

Server: Microsoft-IIS/6 -
Expires: Tue, 17 Jan 2011 01:41:33 GMT
Date: Mon, 16 Jan 2011 01:41:33 GMT

Content-Type: text/html -

Accept-Ranges: bytes -
Last-Modified: Wed, 28 Dec 2010 15:32:21 GMT
ETag: "b0aac0542e25c31:89d"

Content-Length: 7369 -
Which of the following is an example of what the engineer performed?

A. Cross-site scripting
B. Banner grabbing
C. SQL injection
D. Who is database query

Show Suggested Answer

Suggested Answer: B 🗳️

by TrendMicroDLPSSucks at Aug. 13, 2020, 12:59 p.m.

Comments

Submit Cancel

czarul79

8 months, 2 weeks ago

Correct answer is B: Banner grabbing: Banner grabbing or OS fingerprinting is the method used to determine the operating system running on a remote target system. Identifying the OS used on the target host allows an attacker to figure out the vulnerabilities the system posses and the exploits that might work on a system to further carry out additional attacks

upvoted 3 times

...

TrendMicroDLPSSucks

10 months, 3 weeks ago

Banner grabbing is a technique used to gain information about a computer system on a network and the services running on its open ports. Administrators can use this to take inventory of the systems and services on their network.

upvoted 3 times

...