Objective 1.1 Perform Reconnaissance on Target Systems and Networks. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A penetration tester has completed the reconnaissance phase and has collected a large amount of data, including IP addresses, open ports, service versions, and user accounts. The tester needs to organize this information for later analysis and reporting. What is the most effective way to store and organize this data?

   • ARely on memory and take notes on paper.
   • BStore findings in a word processing document with screenshots.
   • CSave all Nmap output to a single text file for reference.
   • DUse a spreadsheet or database to record findings with fields for IP, port, service, version, and notes.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which Nmap output is characteristic of an OS detection scan?

   • AApache httpd 2.4.41
   • BHost is up (0.001s latency)
   • C80/tcp open http
   • DRunning: Linux 2.6.X
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A security analyst is analyzing Nmap output and sees the following line: 'Running: Linux 2.6.X'. The analyst needs to confirm the exact kernel version to check for known vulnerabilities. Which Nmap option should the analyst use to obtain more detailed OS information?

   • Anmap -sS
   • Bnmap -sV
   • Cnmap -O --osscan-guess
   • Dnmap -p-
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   A security analyst runs an Nmap scan against a target and sees the following output: PORT STATE SERVICE 22/tcp open ssh 80/tcp open http 443/tcp open https. What type of Nmap scan was most likely performed?

   • APort scan
   • BService version scan
   • CPing sweep
   • DOS scan
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A security analyst is using Nmap to identify the operating system of a target host. The Nmap output shows 'OS details: Microsoft Windows 10 1709' but the analyst knows that the host is actually a Linux server. The analyst suspects that the target is using an OS spoofing tool. Which Nmap option can help the analyst detect OS spoofing?

   • AUse the -O option with the --max-os-tries option set to 1.
   • BUse the --osscan-guess option to force Nmap to guess more aggressively.
   • CUse the -sV option to perform service version detection and compare with the OS guess.
   • DUse the -sS option to perform a SYN scan and look for OS-specific TTL values.
   Reveal Solution Discussion Select an answer first