Question 1

What open source port-scanning tool is considered to be the standard port-scanning tool for security professionals?

Accepted Answer

A)   NULL
B)   NMap
C)   NScanner
D)   PortGhost B

Question 2

Which ports should security professionals scan when doing a test?

Accepted Answer

As a security tester,you need to know wh...

Question 3

Match each item with a statement below.
-The original utility from which OpenVas was developed

Accepted Answer

A)  Nmap
B)  Fping
C)  Hping
D)  Nessus
E)  closed portF) OpenVASG) filtered portH) open portI) port scanningJ) ping sweep

Question 4

What are the problems with depending on ping sweeps to find out which hosts are "live"?

Accepted Answer

To find out which hosts are "live," ping...

Question 5

Match each item with a statement below.
-A popular port scanners that has the ability to use a GUI front end

Accepted Answer

A)  Nmap
B)  Fping
C)  Hping
D)  Nessus
E)  closed portF) OpenVASG) filtered portH) open portI) port scanningJ) ping sweep

Question 6

Why is it important for a security tester to be able to use Nmap?

Accepted Answer

Nmap has become one of the most popular port scanners and adds new features constantly,such as OS detection and fast multiple-probe ping scanning.Nmap also has a GUI front end called Zenmap that makes working with complex options easier.Nmap has been enhanced over the years because,like many other security tools,it's open source; if bugs are found,users can offer suggestions for correcting them.

Question 7

When security professionals create a packet,they may choose to specifically set which of the following fields to help initiate a response from a target computer?

Accepted Answer

A)   box
B)   flag
C)   open
D)   id

Question 8

Why is it important for you as a security tester to understand and be able to create scripts?

Accepted Answer

Some tools might need to be modified to ...

Question 9

Match each item with a statement below.
-A port state that allows access to applications and can be vulnerable

Accepted Answer

A)  Nmap
B)  Fping
C)  Hping
D)  Nessus
E)  closed portF) OpenVASG) filtered portH) open portI) port scanningJ) ping sweep

Question 10

You can search for vulnerabilities in a host computer by using a port-scanning tool.

Accepted Answer

A) True 
 B)False

Question 11

Which of the following describes a text file containing multiple commands that would usually be entered manually at the command prompt?

Accepted Answer

A)   script
B)   port-scanner
C)   application
D)   configuration file

Question 12

Which statement is where the script performs its main task?

Accepted Answer

A)   do
B)   while
C)   count
D)   bin

Question 13

Match each item with a statement below.
-Tool for performing ping sweeps and used to bypass filtering devices by injecting crafted or otherwise modified IP-packets

Accepted Answer

A)  Nmap
B)  Fping
C)  Hping
D)  Nessus
E)  closed portF) OpenVASG) filtered portH) open portI) port scanningJ) ping sweep

Question 14

How does a SYN scan work?

Accepted Answer

In a normal TCP session,a packet is sent to another computer with the SYN flag set.The receiving computer sends back a packet with the SYN/ACK flag set,indicating an acknowledgment.The sending computer then sends a packet with the ACK flag set.If the port to which the SYN packet is sent is closed,the computer responds to the SYN packet with an RST/ACK packet.If a SYN/ACK packet is received by an attacker's computer,it quickly responds with an RST/ACK packet,closing the session.This is done so that a full TCP connection is never made and logged as a transaction.In this sense,it is "stealthy." After all,you don't want a transaction to be logged showing the IP address that connected to the attacked computer.

Question 15

Match each item with a statement below.
-A port state which does not allow entry or access to a service

Accepted Answer

A)  Nmap
B)  Fping
C)  Hping
D)  Nessus
E)  closed portF) OpenVASG) filtered portH) open portI) port scanningJ) ping sweep

Question 16

In a normal TCP session,the sender sends a packet to another computer with which of the following flags set?

Accepted Answer

A)   SYN/ACK flag
B)   SYN flag
C)   No flag
D)   Reset flag

Question 17

Match each item with a statement below.
-Allows you the ability to scan thousands or even tens of thousands of IP addresses quickly

Accepted Answer

A)  Nmap
B)  Fping
C)  Hping
D)  Nessus
E)  closed portF) OpenVASG) filtered portH) open portI) port scanningJ) ping sweep

Question 18

Match each item with a statement below.
-Allows you to ping multiple IP addresses simultaneously and is usually included in Kali Linux

Accepted Answer

A)  Nmap
B)  Fping
C)  Hping
D)  Nessus
E)  closed portF) OpenVASG) filtered portH) open portI) port scanningJ) ping sweep

Question 19

Attackers typically use ACK scans to get past a firewall or other filtering devices.

Accepted Answer

A) True 
 B)False

Question 20

What network security tool,usually included with Kali Linux,allows a user to ping multiple IP addresses?

Accepted Answer

A)   Nmap
B)   Fping
C)   Tcpdump
D)   Nessus

Exam 5: Port Scanning

What open source port-scanning tool is considered to be the standard port-scanning tool for security professionals?

Correct Answer
verified
B

Which ports should security professionals scan when doing a test?

Correct Answer
verified
As a security tester,you need to know wh...
View Answer

Match each item with a statement below. -The original utility from which OpenVas was developed

Correct Answer
verified

What are the problems with depending on ping sweeps to find out which hosts are "live"?

Correct Answer
verified
To find out which hosts are "live," ping...
View Answer

Match each item with a statement below. -A popular port scanners that has the ability to use a GUI front end

Correct Answer
verified

Why is it important for a security tester to be able to use Nmap?

When security professionals create a packet,they may choose to specifically set which of the following fields to help initiate a response from a target computer?

Correct Answer
verified

Why is it important for you as a security tester to understand and be able to create scripts?

Correct Answer
verified
Some tools might need to be modified to ...
View Answer

Match each item with a statement below. -A port state that allows access to applications and can be vulnerable

Correct Answer
verified

You can search for vulnerabilities in a host computer by using a port-scanning tool.

Correct Answer
verified

Which of the following describes a text file containing multiple commands that would usually be entered manually at the command prompt?

Correct Answer
verified

Which statement is where the script performs its main task?

Correct Answer
verified

Match each item with a statement below. -Tool for performing ping sweeps and used to bypass filtering devices by injecting crafted or otherwise modified IP-packets

Correct Answer
verified

How does a SYN scan work?

Match each item with a statement below. -A port state which does not allow entry or access to a service

Correct Answer
verified

In a normal TCP session,the sender sends a packet to another computer with which of the following flags set?

Correct Answer
verified

Match each item with a statement below. -Allows you the ability to scan thousands or even tens of thousands of IP addresses quickly

Correct Answer
verified

Match each item with a statement below. -Allows you to ping multiple IP addresses simultaneously and is usually included in Kali Linux

Correct Answer
verified

Attackers typically use ACK scans to get past a firewall or other filtering devices.

Correct Answer
verified

What network security tool,usually included with Kali Linux,allows a user to ping multiple IP addresses?

Correct Answer
verified

Exam 5: Port Scanning

What open source port-scanning tool is considered to be the standard port-scanning tool for security professionals?

Correct AnswerverifiedB

Which ports should security professionals scan when doing a test?

Correct AnswerverifiedAs a security tester,you need to know wh...View AnswerShow Answer

Match each item with a statement below. -The original utility from which OpenVas was developed

Correct AnswerverifiedShow Answer

What are the problems with depending on ping sweeps to find out which hosts are "live"?

Correct AnswerverifiedTo find out which hosts are "live," ping...View AnswerShow Answer

Match each item with a statement below. -A popular port scanners that has the ability to use a GUI front end

Correct AnswerverifiedShow Answer

Why is it important for a security tester to be able to use Nmap?

When security professionals create a packet,they may choose to specifically set which of the following fields to help initiate a response from a target computer?

Correct AnswerverifiedShow Answer

Why is it important for you as a security tester to understand and be able to create scripts?

Correct AnswerverifiedSome tools might need to be modified to ...View AnswerShow Answer

Match each item with a statement below. -A port state that allows access to applications and can be vulnerable

Correct AnswerverifiedShow Answer

You can search for vulnerabilities in a host computer by using a port-scanning tool.

Correct AnswerverifiedShow Answer

Which of the following describes a text file containing multiple commands that would usually be entered manually at the command prompt?

Correct AnswerverifiedShow Answer

Which statement is where the script performs its main task?

Correct AnswerverifiedShow Answer

Match each item with a statement below. -Tool for performing ping sweeps and used to bypass filtering devices by injecting crafted or otherwise modified IP-packets

Correct AnswerverifiedShow Answer

How does a SYN scan work?

Match each item with a statement below. -A port state which does not allow entry or access to a service

Correct AnswerverifiedShow Answer

In a normal TCP session,the sender sends a packet to another computer with which of the following flags set?

Correct AnswerverifiedShow Answer

Match each item with a statement below. -Allows you the ability to scan thousands or even tens of thousands of IP addresses quickly

Correct AnswerverifiedShow Answer

Match each item with a statement below. -Allows you to ping multiple IP addresses simultaneously and is usually included in Kali Linux

Correct AnswerverifiedShow Answer

Attackers typically use ACK scans to get past a firewall or other filtering devices.

Correct AnswerverifiedShow Answer

What network security tool,usually included with Kali Linux,allows a user to ping multiple IP addresses?

Correct AnswerverifiedShow Answer

Correct Answer
verified
B

Correct Answer
verified
As a security tester,you need to know wh...
View Answer

Correct Answer
verified

Correct Answer
verified
To find out which hosts are "live," ping...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
Some tools might need to be modified to ...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified