eJPT Host and Network Auditing 3 — Questions and Answers
Question 1: What is the purpose of running 'nmap -O' against a target?
- Operating system detection (Correct answer)
- Open port scan only
- Output results to a file
- Offline host scan
Correct answer: Operating system detection
The -O flag enables OS detection, using TCP/IP fingerprinting to guess the target's operating system.
Question 2: Which Nmap output format is most useful for importing results into other tools for further processing?
- XML (-oX) (Correct answer)
- Normal (-oN)
- Grepable (-oG)
- Script kiddie (-oS)
Correct answer: XML (-oX)
XML output (-oX) is machine-readable and supported by many tools like Metasploit for importing scan data.
Question 3: During a network audit, a host at 192.168.1.50 has TCP 3389 open. What service is likely running?
- Remote Desktop Protocol (RDP) (Correct answer)
- VNC
- SSH
- Telnet
Correct answer: Remote Desktop Protocol (RDP)
TCP port 3389 is the default port for Microsoft's Remote Desktop Protocol (RDP).
Question 4: What does 'OS fingerprinting' help an auditor determine during a host audit?
- The operating system and version running on a target host (Correct answer)
- The physical location of the host
- The user accounts on the host
- The firewall rules protecting the host
Correct answer: The operating system and version running on a target host
OS fingerprinting analyzes network responses to identify the target's operating system and version.
Question 5: Which protocol uses port 161 UDP and is commonly audited for information disclosure?
- SNMP (Simple Network Management Protocol) (Correct answer)
- DNS
- NTP
- DHCP
Correct answer: SNMP (Simple Network Management Protocol)
SNMP on UDP 161 can expose system information, running processes, and network configuration if misconfigured.
Question 6: What is the main purpose of a network topology map during an audit?
- To visualize the relationships and connections between hosts in the network (Correct answer)
- To list all user accounts on target systems
- To document CVEs found on hosts
- To capture plaintext credentials
Correct answer: To visualize the relationships and connections between hosts in the network
A network topology map shows how hosts interconnect, helping auditors understand the network architecture and attack paths.
Question 7: Which Nmap timing template provides the fastest scan while risking detection or inaccuracy?
- -T5 (Insane) (Correct answer)
- -T1 (Sneaky)
- -T3 (Normal)
- -T4 (Aggressive)
Correct answer: -T5 (Insane)
-T5 is the fastest Nmap timing template but may overwhelm targets, drop packets, or trigger IDS alerts.
eJPT Host and Network Auditing 3
What is the purpose of running 'nmap -O' against a target?