Free Printable Module 2A. Active Reconnaissance

Worksheets

Module 2A. Active Reconnaissance - Scanning

Total questions: 15

Worksheet time: 8mins

Name

Class

Date

Which of the following is OUTSIDE the scope of Active Reconnaissance?

Open ports

Live hosts

Running services

Payloads

Which of the following is NOT a tool to discover live hosts?

whois

arp-scan

nmap

ping sweep

Which of the following protocols CAN NOT be used for live host discovery?

UDP

ICMP

ARP

SSH

Which of the following can ONLY be used to scan for live host WITHIN the same subnet?

nmap TCP ACK ping scan

arp-scan

ping sweep

nmap UDP ping scan

Which of the following live hosts discovery scans send ICMP packets? Pick 2

ping sweep

nmap TCP SYN ping scan

nmap ICMP ping (echo) scan

nmap UDP ping scan

Which of the following nmap command will perform an ARP scan for live hosts discovery within the subnet 10.0.1.0/24?

nmap -sn -sV 10.0.1.0/24

nmap -sn -PR 10.0.1.0/24

nmap -sn -PE 10.0.1.0/24

sudo nmap -sn -PM 10.0.1.0/24

Which of the following flags specifies to scan all the 65535 ports? Pick 2

nmap 10.0.1.2 -p 65535

nmap 10.0.1.2 -p all

nmap 10.0.1.2 -p-

nmap 10.0.1.2 -p 0-65535

Which of the following nmap scans will perform a full three-way handshake to scan for open ports?

UDP

TCP SYN

TCP Connect

TCP ACK

Which of the following nmap scans is more likely to be detected by an IDS system?

UDP

TCP SYN

TCP Connect

TCP ACK

10.

Which of the following nmap scans is considered stealthy?

UDP

TCP SYN

TCP Connect

TCP ACK

11.

Which of the following nmap scans is the slowest to perform?

UDP

TCP SYN

TCP Connect

TCP ACK

12.

Which of the following commands will perform a full three-way handshake to scan for open ports in the machine 10.0.1.2 without scanning for service version?

nmap -sT -Pn 10.0.1.2

sudo nmap -sS -Pn 10.0.1.2

sudo nmap -sU -Pn 10.0.1.2

sudo nmap -sV -Pn 10.0.1.2

13.

Which of the following commands will perform a partial three-way handshake to scan for open ports in the machine 10.0.1.2 without scanning for service version?

nmap -sT -Pn 10.0.1.2

sudo nmap -sS -Pn 10.0.1.2

sudo nmap -sU -Pn 10.0.1.2

sudo nmap -sV -Pn 10.0.1.2

14.

Which of the following nmap scans will detect the versions of services running on ports 21 AND 80 for the machine 10.0.1.2?

nmap -sT -Pn 10.0.1.2 -p21,80

sudo nmap -sS -Pn 10.0.1.2 -p-

sudo nmap -sV -Pn 10.0.1.2 -p21-80

sudo nmap -sV -Pn 10.0.1.2 -p21,80

15.

Which of the following nmap scans will detect the OS version of the machine 10.0.1.2?

sudo nmap -O -Pn 10.0.1.2

sudo nmap -sS -Pn 10.0.1.2

sudo nmap -sU -Pn 10.0.1.2

sudo nmap -sV -Pn 10.0.1.2

Reset

Module 2A. Active Reconnaissance - Scanning

Total questions: 15

Worksheet time: 8mins

Similar Resources on Wayground