112-57: Threat Intelligence EssentialsDemo

Question

Michael, a forensic expert, was assigned to investigate an incident involving unauthorized intrusion attempts. During the investigation, Michael identified every open port on a system and disabled them because open ports can enable attackers to install malicious services and compromise the security of the system or network.

Which of the following commands helped Michael identify open ports in this scenario?

A netstat -rn
B ifconfig <interface> -promisc
C netstat -i
D nmap -sT localhost

Explanation

Nmap’s -sT option runs a TCP connect scan, which attempts TCP connections to the target’s ports and reports their states, including ports that are open. Running it against localhost scans the local system.

Learn more

Nmap Reference Guide: Port Scanning Techniques

112-57: Threat Intelligence EssentialsDemo

AstroTutor

Notes

Readiness

QuestionQ52

Community Discussion