Scanning and Host Discovery GPEN Practice Questions (Page 6)

Questions 26–30

1. 26application · easy

   A tester has discovered an open port 3306 on a target. The tester wants to determine the exact version of the MySQL database running on that port. Which Nmap command should be used?

   • Anmap -p 3306 192.168.1.10
   • Bnmap -sC -p 3306 192.168.1.10
   • Cnmap -sV -p 3306 192.168.1.10
   • Dnmap -O -p 3306 192.168.1.10
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is the primary purpose of operating system fingerprinting?

   • ATo determine the version of a web server
   • BTo map the network topology
   • CTo discover open ports on the target
   • DTo identify the operating system of a target host
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A tester is performing a port scan against a target and wants to hide the source IP address by making it appear that the scan is coming from multiple different hosts. Which Nmap option should be used?

   • A--spoof-mac 00:11:22:33:44:55
   • B-g 53
   • C-D 10.0.0.1,10.0.0.2
   • D-S 10.0.0.3
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A tester has identified an open port 25 on a target and wants to determine the exact version of the mail server software. The tester runs 'nmap -sV -p 25 192.168.1.10' but the output only shows '25/tcp open smtp' without a version. Which of the following is the most likely reason for this?

   • AThe service is not responding to Nmap's version detection probes.
   • BNmap does not support version detection for SMTP.
   • CThe tester did not use the -A option.
   • DThe port is actually closed.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A penetration tester has run an Nmap scan and received the following output for a target host: PORT STATE SERVICE 22/tcp open ssh 80/tcp open http 443/tcp open https 3306/tcp filtered mysql Which interpretation is correct?

   • APort 3306 is open, but the service is not responding to the scan.
   • BPort 3306 is closed, and the service is not running.
   • CPort 3306 is open, and the service is running but requires authentication.
   • DPort 3306 is filtered, meaning a firewall is likely blocking the port, but the service may still be running behind it.
   Reveal Solution Discussion Select an answer first