OSCP Network Scanning and Enumeration 2

Question 1

Which tool is used to perform DNS zone transfer attacks during OSCP reconnaissance?

Accepted Answer

dig axfr

Answer

nslookup -type=A

Answer

host -t MX

Answer

whois -d

Question 2

During an OSCP lab, you find port 111 open on a Linux target. What service is most likely running?

Accepted Answer

Portmapper/RPC

Answer

HTTP proxy

Answer

DNS resolver

Answer

LDAP directory

Question 3

What is the purpose of the 'rpcinfo -p <target>' command during enumeration?

Accepted Answer

Enumerate all RPC services and their port numbers on the target

Answer

Perform a remote password reset via RPC

Answer

Scan all open UDP ports

Answer

List all running processes on the target

Question 4

Which Nmap timing template (-T) value provides the most aggressive scan speed?

Accepted Answer

-T5

Answer

-T2

Answer

-T3

Answer

-T4

Question 5

What tool would you use to brute-force directory and file names on a web server during OSCP?

Accepted Answer

gobuster

Answer

enum4linux

Answer

responder

Answer

bloodhound

Question 6

When enumerating NFS shares during OSCP, which command shows available exports on a target?

Accepted Answer

showmount -e <target>

Answer

nfsstat -m <target>

Answer

mount -t nfs <target>:/

Answer

rpcinfo --list <target>