Cyber EOP - Nmap vs Wireshark By Mr. B

What is the primary purpose of Nmap?

• Packet analysis

• Data encryption

• Web development

• Network scanning

Answer explanation

The primary purpose of Nmap is network scanning, which allows users to discover hosts and services on a computer network. It helps in identifying open ports and services, making it essential for network security assessments.

Which tool is categorized as a packet analyzer?

• Nmap

• Wireshark

• Netcat

• Tcpdump

Answer explanation

Wireshark is a well-known packet analyzer that captures and displays network traffic in real-time, making it the correct choice. Nmap is a network scanner, Netcat is a networking utility, and Tcpdump is a command-line packet analyzer.

What was Wireshark originally named?

• PacketSniffer

• Ethereal

• NetAnalyzer

• TrafficMonitor

Answer explanation

Wireshark was originally named Ethereal. This name was used until 2006 when it was changed due to trademark issues. Ethereal is the correct answer among the options provided.

Which organization makes Nmap available?

• nmap.org

• wireshark.org

• networktools.org

• insecure.org

Answer explanation

Nmap is made available by the organization insecure.org, which is the official site for the Nmap security scanner. The other options do not host Nmap.

What type of scanning does Nmap perform?

• Generic scanning

• Active scanning

• Passive scanning

• Targeted scanning

Answer explanation

Nmap performs targeted scanning, which focuses on specific hosts or networks to gather detailed information about their services and vulnerabilities, unlike generic or passive scanning methods.

Which programming languages is Nmap written in?

• Java and Python

• C, C++, Python, and Lua

• C# and Ruby

• JavaScript and PHP

Answer explanation

Nmap is primarily written in C and C++, with additional components in Python and Lua. This combination allows for efficient network scanning and scripting capabilities, making 'C, C++, Python, and Lua' the correct answer.

What does Wireshark primarily capture?

• File transfers

• Network traffic

• Service requests

• Usernames

Answer explanation

Wireshark primarily captures network traffic, which includes all data packets transmitted over a network. This allows users to analyze and troubleshoot network issues effectively.

Which tool is better suited for network security analysis?

• Neither tool

• Both are equal

• Wireshark

• Nmap

Answer explanation

Wireshark is better suited for network security analysis as it captures and analyzes packet data in real-time, providing detailed insights into network traffic. Nmap is primarily a network scanning tool, not focused on packet analysis.

What type of information does Nmap fetch?

• Host and service information

• Network traffic logs

• User activity

• Packet details

Answer explanation

Nmap primarily fetches host and service information, such as open ports and running services on a network. It does not collect network traffic logs, user activity, or detailed packet information.

Which feature is NOT associated with Wireshark?

• Parsing network fields

• Host discovery

• Displaying captured data

• Capturing packets

Answer explanation

Wireshark is primarily used for capturing and analyzing network packets, parsing network fields, and displaying captured data. It does not have a dedicated feature for host discovery, making 'Host discovery' the correct answer.