What does the Nmap flag `-sV` do?

Enables service version detection

What is banner grabbing used for in the context of service discovery?

To determine if the target is behind a firewall

To extract information about the service, such as its name and version

To identify the operating system of the target

A security analyst is performing a discovery assessment and wants to gather service banners from multiple hosts on a subnet. The analyst wants to use a single tool that can automate banner grabbing across many hosts and also provide service version information. Which tool and approach is most appropriate?

Use Nmap with the -sV flag to perform service version detection and banner grabbing across the subnet.

Use a telnet client to manually connect to each host and read the banner.

Use netcat to connect to each host and capture banners one at a time.

Use Wireshark to capture banners from passive traffic.

EC-CouncilCertified Ethical Hacker

Domain 2Objective 5

Service and OS Discovery CEH Practice Questions (Page 3)

Part of the Reconnaissance Techniques domain, which makes up ~14% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~13–22 in this domain), expect 2–3 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

8concepts

Questions 11–15

11foundation · easy
What does the Nmap flag `-sV` do?
Select an answer first
12application · medium
During an internal penetration test, you discover an open TCP port 22 on a Linux server. You need to determine the exact SSH server software and version to search for known vulnerabilities. Which Nmap command is most appropriate?
Select an answer first
13foundation · easy
What is banner grabbing used for in the context of service discovery?
Select an answer first
14application · medium
A security analyst is performing a discovery assessment and wants to gather service banners from multiple hosts on a subnet. The analyst wants to use a single tool that can automate banner grabbing across many hosts and also provide service version information. Which tool and approach is most appropriate?
Select an answer first
15expert · medium
A penetration tester is performing a discovery scan on a target that is known to be running a web server on port 80 and an SSH server on port 22. The tester wants to identify the exact versions of both services and the operating system of the target. Which Nmap command is most appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Service and OS Discovery CEH Practice Questions (Page 3)

Questions 11–15

What does the Nmap flag `-sV` do?

During an internal penetration test, you discover an open TCP port 22 on a Linux server. You need to determine the exact SSH server software and version to search for known vulnerabilities. Which Nmap command is most appropriate?

What is banner grabbing used for in the context of service discovery?

A penetration tester is performing a discovery scan on a target that is known to be running a web server on port 80 and an SSH server on port 22. The tester wants to identify the exact versions of both services and the operating system of the target. Which Nmap command is most appropriate?

Keep studying — Reconnaissance Techniques