7.3.2 - Recon with Scanning

What is the purpose of a Network Scanner?

• To clean viruses from a network

• To enumerate and fingerprint devices in a network to identify vulnerabilities

• To increase the speed of the network

• To monitor the data usage of a network

Answer explanation

A Network Scanner is used to enumerate and fingerprint devices in a network to identify vulnerabilities, not to clean viruses or increase network speed.

What does enumeration in the context of network scanning involve?

• Calculating the number of devices connected to a network

• Identifying the computers in a network and trying to find details such as services, hostnames, file shares, usernames, etc.

• Counting the number of files transferred over a network

• Measuring the bandwidth usage of each device on a network

Answer explanation

Enumeration in the context of network scanning involves identifying the computers in a network and trying to find details such as services, hostnames, file shares, usernames, etc.

What is fingerprinting in network scanning?

• Tracking the physical location of network devices

• Identifying the specific OS or application running on a system

• Recording the serial numbers of all devices on a network

• Creating a backup of system configurations

Answer explanation

Fingerprinting in network scanning involves identifying the specific OS or application running on a system, not tracking physical location or recording serial numbers.

What is the most popular network scanning tool mentioned in the document?

• Wireshark

• Zenmap

• Nmap

• Nessus

Answer explanation

The most popular network scanning tool mentioned in the document is Nmap, as it is the correct answer choice provided.

What is the name of the GUI version of Nmap?

• Wireshark GUI

• NetScanner

• Zenmap

• NmapGUI

Answer explanation

The GUI version of Nmap is called Zenmap, making it the correct choice among the options provided.

What is Nmap primarily used for?

• Monitoring network traffic

• Sending emails

• Scanning networks

• Filtering spam

Answer explanation

Nmap is primarily used for scanning networks, not for monitoring network traffic, sending emails, or filtering spam.

What does the TCP 3-way handshake process start with?

• SYN-ACK

• ACK

• SYN

• Data transmission

Answer explanation

The TCP 3-way handshake process starts with the SYN packet being sent by the client to the server.

What is the second step in the TCP 3-way handshake after a SYN packet is sent?

• The connection is terminated

• The receiver sends a SYN-ACK packet

• The receiver sends an ACK packet

• Data is immediately transferred

Answer explanation

After receiving the SYN packet, the receiver sends a SYN-ACK packet as the second step in the TCP 3-way handshake.

What happens after the SYN-ACK packet is received in the TCP 3-way handshake?

• The sender sends a SYN packet

• The sender sends a SYN-ACK packet

• The sender sends an ACK packet and begins data transfer

• The connection is closed

Answer explanation

After receiving the SYN-ACK packet in the TCP 3-way handshake, the sender sends an ACK packet and begins data transfer, establishing the connection.

What is the purpose of an Nmap scan?

• To send emails to the target network

• To send a lot of packets to the target network and wait for a response

• To download files from the target network

• To create a secure connection to the target network

Answer explanation

The purpose of an Nmap scan is to send a lot of packets to the target network and wait for a response, not to send emails, download files, or create a secure connection.