A security analyst is scanning a web server and wants to check for common vulnerabilities such as SQL injection or cross-site scripting (XSS). The analyst wants to use nmap's scripting engine to automate this check. Which nmap command should be used?

nmap --script default -p 80 192.168.1.10

nmap --script http-sql-injection -p 80 192.168.1.10

nmap --script http-vuln-* -p 80 192.168.1.10

nmap --script http-xss -p 80 192.168.1.10

LPIC-3 Security

Domain 4Objective 1

328.1 Network Hardening (weight: 4) LPIC-3-SECURITY Practice Questions (Page 3)

Part of the Topic 328: Network Security domain, which makes up ~27% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~9–16 in this domain), expect 2–4 from this objective — we provide 44 practice questions to prepare you well beyond it. (estimate)

44questions here

9free pages

16concepts

Questions 11–15

11foundation · easy
Which nmap scan type sends a SYN packet and waits for a SYN-ACK to determine if a port is open, without completing the TCP handshake?
Select an answer first
12application · medium
A security analyst is scanning a web server and wants to check for common vulnerabilities such as SQL injection or cross-site scripting (XSS). The analyst wants to use nmap's scripting engine to automate this check. Which nmap command should be used?
Select an answer first
13foundation · easy
Which authentication method is commonly used for wireless networks and supports certificate-based authentication?
Select an answer first
14foundation · easy
Which nmap scan type is used to scan UDP ports?
Select an answer first
15foundation · easy
Which authentication protocol sends the password in clear text (unencrypted) over the network?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to LPIC-3-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-3-SECURITY” is a trademark of its owner, used for identification only.

328.1 Network Hardening (weight: 4) LPIC-3-SECURITY Practice Questions (Page 3)

Questions 11–15

Which nmap scan type sends a SYN packet and waits for a SYN-ACK to determine if a port is open, without completing the TCP handshake?

A security analyst is scanning a web server and wants to check for common vulnerabilities such as SQL injection or cross-site scripting (XSS). The analyst wants to use nmap's scripting engine to automate this check. Which nmap command should be used?

Which authentication method is commonly used for wireless networks and supports certificate-based authentication?

Which nmap scan type is used to scan UDP ports?

Which authentication protocol sends the password in clear text (unencrypted) over the network?

Keep studying — Topic 328: Network Security