During a security assessment, you need to determine which services are running on a target server and their versions to later check for known vulnerabilities. Which scanning technique is most appropriate?

OS fingerprinting using Nmap's -O flag

Service version detection using Nmap's -sV flag

Packet capture to analyze network traffic

Ping sweep to check host availability

You are in the footprinting phase for a client. You need to gather information about the client's DNS servers, administrative contacts, and registered domain names. Which of the following sources would be most useful?

A network vulnerability scanner

A packet sniffer on the client's network

WHOIS databases and DNS interrogation tools like nslookup

A brute-force tool for cracking passwords

EC-CouncilCertified Security Specialist

Domain 3Objective 4

Ethical Hacking Phases (reconnaissance to Exploitation) ECSS Practice Questions (Page 10)

Part of the Ethical Hacking Fundamentals and Core Attacks domain, which makes up ~17% of our current practice bank.

47questions here

10free pages

7concepts

Questions 46–47

46application · medium
During a security assessment, you need to determine which services are running on a target server and their versions to later check for known vulnerabilities. Which scanning technique is most appropriate?
Select an answer first
47application · medium
You are in the footprinting phase for a client. You need to gather information about the client's DNS servers, administrative contacts, and registered domain names. Which of the following sources would be most useful?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to ECSS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECSS” is a trademark of its owner, used for identification only.

Ethical Hacking Phases (reconnaissance to Exploitation) ECSS Practice Questions (Page 10)

Questions 46–47

During a security assessment, you need to determine which services are running on a target server and their versions to later check for known vulnerabilities. Which scanning technique is most appropriate?

You are in the footprinting phase for a client. You need to gather information about the client's DNS servers, administrative contacts, and registered domain names. Which of the following sources would be most useful?

Keep studying — Ethical Hacking Fundamentals and Core Attacks