
EC-CouncilWeb Application Hacking and Security
Domain 8Objective 3
Network Scanning and Reconnaissance WAHS Practice Questions (Page 10)
Part of the Authentication and Session Management domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 360-minute exam (~145–240 total, ~25–41 in this domain), expect 8–14 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)
47questions here
10free pages
8concepts
Questions 46–47
- 46
During a penetration test, a tester needs to identify the operating system of a target host that is behind a firewall that drops most ICMP traffic. The tester has already discovered that port 80 is open. Which Nmap command is most appropriate to determine the OS?
Select an answer first - 47
Which of the following techniques is commonly used to determine the version of a web server running on a target host?
Select an answer first
Finished these 2 questions?
Review the revealed explanations, or continue through the curriculum.
No more pagesBack to WAHS
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “WAHS” is a trademark of its owner, used for identification only.