eJPT Host and Network Auditing 3

Question 1

What is the purpose of running 'nmap -O' against a target?

Accepted Answer

Operating system detection

Answer

The -O flag enables OS detection, using TCP/IP fingerprinting to guess the target's operating system.

Question 2

Which Nmap output format is most useful for importing results into other tools for further processing?

Accepted Answer

XML (-oX)

Answer

XML output (-oX) is machine-readable and supported by many tools like Metasploit for importing scan data.

Question 3

During a network audit, a host at 192.168.1.50 has TCP 3389 open. What service is likely running?

Accepted Answer

Remote Desktop Protocol (RDP)

Answer

TCP port 3389 is the default port for Microsoft's Remote Desktop Protocol (RDP).

Question 4

What does 'OS fingerprinting' help an auditor determine during a host audit?

Accepted Answer

The operating system and version running on a target host

Answer

OS fingerprinting analyzes network responses to identify the target's operating system and version.

Question 5

Which protocol uses port 161 UDP and is commonly audited for information disclosure?

Accepted Answer

SNMP (Simple Network Management Protocol)

Answer

SNMP on UDP 161 can expose system information, running processes, and network configuration if misconfigured.

eLearnSecurity Junior Penetration Tester eJPT Practice Practice Test