eJPT Host and Network Auditing 2

Question 1

Which Nmap script is used to enumerate SMB shares on a Windows host?

Accepted Answer

smb-enum-shares

Answer

The smb-enum-shares NSE script lists available SMB shares on a target Windows system.

Question 2

What does the Nmap flag '-sV' accomplish during a scan?

Accepted Answer

Version detection of running services

Answer

-sV probes open ports to determine service/version information running on the target.

Question 3

During a network audit, you discover a host responding on TCP 445. Which protocol is most likely running?

Accepted Answer

SMB (Server Message Block)

Answer

TCP port 445 is the standard port for SMB, used for Windows file and printer sharing.

Question 4

Which tool is commonly used to capture and analyze network packets during a host audit?

Accepted Answer

Wireshark

Answer

Wireshark is a network protocol analyzer used to capture and inspect live or recorded network traffic.

Question 5

What Nmap command would scan all 65535 TCP ports on a target?

Accepted Answer

nmap -p- <target>

Answer

The -p- flag tells Nmap to scan all 65535 TCP ports instead of just the default top 1000.

eLearnSecurity Junior Penetration Tester eJPT Practice Practice Test