OSCP Network Scanning and Enumeration 3

Question 1

Which Nmap output format is most useful for importing results into other tools during OSCP?

Accepted Answer

-oX (XML)

Answer

-oN (normal)

Answer

-oG (grepable)

Answer

-oS (script kiddie)

Question 2

What does the acronym 'OSINT' stand for in the context of OSCP reconnaissance?

Accepted Answer

Open Source Intelligence

Answer

Offensive System Integrated Network Testing

Answer

Operational Security Intrusion Network Tool

Answer

Online System Information and Tracking

Question 3

Which service typically runs on port 3306 and is a common target for enumeration in OSCP labs?

Accepted Answer

MySQL/MariaDB

Answer

PostgreSQL

Answer

Microsoft SQL Server

Answer

Oracle Database

Question 4

What Nmap script can identify anonymous FTP login on a target?

Accepted Answer

--script=ftp-anon

Answer

--script=ftp-bounce

Answer

--script=ftp-brute

Answer

--script=ftp-vsftpd-backdoor

Question 5

Which protocol and port combination indicates an LDAP service that might be enumerated for Active Directory information?

Accepted Answer

TCP 389

Answer

UDP 137

Answer

TCP 445

Answer

UDP 161

Question 6

What tool provides an automated network and service enumeration report, similar to running multiple tools in sequence?

Accepted Answer

AutoRecon

Answer

Metasploit db_autopwn

Answer

SQLmap --crawl

Answer

Nikto --Format