eJPT Scanning and Enumeration 2

Question 1

Which Nmap scan type sends a SYN packet and waits for a SYN-ACK without completing the three-way handshake?

Accepted Answer

SYN stealth scan (-sS)

Answer

SYN stealth scan (-sS) sends a SYN and tears down the connection after receiving SYN-ACK, never completing the handshake.

Question 2

What does the Nmap option '-p-' specify?

Accepted Answer

Scan all 65535 TCP ports

Answer

The '-p-' flag tells Nmap to scan all 65535 TCP ports instead of just the default top 1000.

Question 3

Which SMB enumeration tool can list shares, users, and OS information on a target Windows host?

Accepted Answer

enum4linux

Answer

enum4linux is a Linux tool that wraps Samba utilities to enumerate SMB shares, users, groups, and OS details.

Question 4

What is the purpose of the Nmap '-sV' flag?

Accepted Answer

Detect service versions on open ports

Answer

'-sV' probes open ports to determine the service name and version number running on each.

Question 5

During an Nmap scan, a port returns the state 'filtered'. What does this most likely indicate?

Accepted Answer

A firewall or ACL is blocking probe packets

Answer

A 'filtered' state means Nmap cannot determine if the port is open because a packet filter is dropping or blocking probes.

eLearnSecurity Junior Penetration Tester eJPT Practice Practice Test