Which of the following scanning method splits the TCP header into several packets and makes it difficult for packet filters to detect the purpose of the packet?

What would you enter, if you wanted to perform a stealth scan using Nmap?

You are doing an internal security audit and intend to find out what ports are open on all the servers. What is the best way to find out?

If a tester is attempting to ping a target that exists but receives no response or a response that states the destination is unreachable, ICMP may be disabled and the network may be using TCP. Which tool could the tester use to get a response from a host using TCP?

The following is part of a log file taken from the machine on the network with the IP address of 192.168.0.110: What type of activity has been logged?

You are attempting to run an Nmap port scan on a web server. Which of the following commands would result in a scan of common ports with the least amount of noise in order to evade IDS?

Which of the following will perform an Xmas scan using NMAP?

Which is the first step followed by Vulnerability Scanners for scanning a network?

You are a Penetration Tester and are assigned to scan a server. You need to use a scanning technique wherein the TCP Header is split into many packets so that it becomes difficult to detect what the packets are meant for. Which of the below scanning technique will you use?

You perform a scan of your company's network and discover that TCP port 123 is open. What services by default run on TCP port 123?

You have successfully compromised a server having an IP address of 10.10.0.5. You would like to enumerate all machines in the same network quickly. What is the best nmap command you will use?

Which Nmap option would you use if you were not concerned about being detected and wanted to perform a very fast scan?

An attacker scans a host with the below command. Which three flags are set? (Choose three.) #nmap -sX host.domain.com

If you want only to scan fewer ports than the default scan using Nmap tool, which option would you use?

You are the Network Admin, and you get a complaint that some of the websites are no longer accessible. You try to ping the servers and find them to be reachable. Then you type the IP address and then you try the browser, and find it to be accessible. But they are not accessible when you try using the URL. What may be the problem?

Identify the UDP port that Network Time Protocol (NTP) uses as its primary means of communication?

What does the option star symbol indicate in the following picture?

You want to do an ICMP scan on a remote computer using hping2. What is the proper syntax?

What is the way to decide how a packet will move from an untrusted outside host to a protected inside that is behind a firewall, which permits the hacker to determine which ports are open and if the packets can pass through the packet-filtering of the firewall?

What type of OS fingerprinting technique sends specially crafted packets to the remote OS and analyzes the received response?

Firewalk has just completed the second phase (the scanning phase) and a technician receives the output shown below. What conclusions can be drawn based on these scan results?

TCP port 21 - no response

TCP port 22 - no response

TCP port 23 - Time-to-live exceeded

A penetration tester is conducting a port scan on a specific host. The tester found several ports opened that were confusing in concluding the Operating System (OS) version installed. Considering the NMAP result below, which of the following is likely to be installed on the target machine by the OS?

Starting NMAP 5.21 at 20011-03-15 11:06

NMAP scan report for 172.16.40.65

Host ip up (1.00s latency).

Not shown: 993 closed ports PORT STATE SERVICE

21/tcp open ftp

23/tcp open telnet

80/tcp open http

139/tcp open netbios-ssn

515/tcp open

631/tcp open ipp

9100/tcp open

MAC Address: 00:00:48:0D:EE:8

You are an Ethical Hacker who is auditing the ABC company. When you verify the NOC one of the machines has 2 connections, one wired and the other wireless. When you verify the configuration of this Windows system you find two static routes.route add 10.0.0.0 mask 255.0.0.0 10.0.0.1 route add 0.0.0.0 mask 255.0.0.0 199.168.0.1 What is the main purpose of those static routes? 

An attacker is using nmap to do a ping sweep and a port scanning in a subnet of 254 addresses. In which order should he perform these steps?

Which of the following Nmap commands will produce the following output?

Starting Nmap 7.80 ( https://nmap.org ) at 2022-04-08 09:31 EDT

Nmap scan report for 192.168.1.1 Host is up (0.00030s latency).

Not shown: 65534 open|filtered ports, 65529 filtered ports

PORT STATE SERVICE

22/tcp open ssh

443/tcp open https

444/tcp open snpp

3154/tcp open ccmrmi

As an Ethical Hacker you are capturing traffic from your customer network with Wireshark and you need to find and verify just SMTP traffic. What command in Wireshark will help you to find this kind of traffic?

You have successfully compromised a machine on the network and found a server that is alive on the same network. You tried to ping it but you didn't get any response back. What is happening?

The following is part of a log file taken from the machine on the network with the IP address of 192.168.1.106: What type of activity has been logged?

The network in ABC company is using the network address 192.168.1.64 with mask 255.255.255.192. In the network the servers are in the addresses 192.168.1.122, 192.168.1.123 and 192.168.1.124. An attacker is trying to find those servers but he cannot see them in his scanning. The command he is using is: nmap 192.168.1.64/28 Why he cannot see the servers?

Emily uses nmap to scan two hosts using this command:
nmap -sS -T4 -O 192.168.99.1 192.168.99.7
He receives this output (912.jpg):What is his conclusion?

Port scanning can be used as part of a technical assessment to determine network vulnerabilities. The TCP XMAS scan is used to identify listening ports on the targeted system. If a scanned port is open, what happens?

Trinity needs to scan all hosts on a /16 network for TCP port 445 only. What is the fastest way she can accomplish this with Nmap? Stealth is not a concern.

To maintain compliance with regulatory requirements, a security audit of the systems on a network must be performed to determine their compliance with security policies. Which one of the following tools would most likely be used in such an audit?

Gavin owns a white-hat firm and is performing a website security audit for one of his clients. He begins by running a scan which looks for common misconfigurations and outdated software versions. Which of the following tools is he most likely using?

NMAP -sn 192.168.11.200-215 The NMAP command above performs which of the following?

You have successfully gained access to your client's internal network and successfully comprised a Linux server which is part of the internal IP network. You want to know which Microsoft Windows workstations have file sharing enabled. Which port would you see listening on these Windows machines in the network?

The tools which receive event logs from servers, network equipment, and applications, and perform analysis and correlation on those logs, and can generate
alarms for security relevant issues, are known as what?

What does the -oX flag do in an Nmap scan?

During an Xmas scan, what indicates a port is closed?

While scanning with Nmap, Patin found several hosts which have the IP ID of incremental sequences. He then decided to conduct:

nmap -Pn -p -sI kiosk.adobe.com www.riaa.com

kiosk.adobe.com is the host with incremental IP ID sequence. What is the purpose of using "-sI" with Nmap?

Your company was hired by a small healthcare provider to perform a technician assessment on the network. What is the best approach for discovering vulnerabilities on a Windows-based computer?

Which of the following is a command line packet analyzer similar to GUI-based Wireshark?

If you want to only scan fewer ports than the default scan using Nmap tool, which option would you use?

Which of the following tools can be used for passive OS fingerprinting?

Which of the following tools is used to analyze the files produced by several packet-capture programs such as tcpdump, WinDump, Wireshark, and EtherPeek?

Which of the following TCP communication flags confirms the receipt of a transmission and identifies the next expected sequence number?

Which of the following ping methods is effective in identifying active hosts similar to the ICMP timestamp ping, specifically when the administrator blocks the conventional ICMP ECHO ping?

Which of the following IDS/firewall evasion techniques is used by an attacker to bypass Internet censors and evade certain IDS and firewall rules?

Which of the following port number is used to exploit vulnerabilities within DNS servers to launch attacks?

Which of the following NTP commands determines where the NTP server obtains the time from and follows the chain of NTP servers back to its primary time source?