ECSA v10: EC-Council Certified Security Analyst v10

By ECCouncil · Question Mode

QuestionQ123

VerifiedDatabase Penetration Testing Methodology

Adam is a senior penetration tester at Eon Tech Services Ltd. The company asks him to conduct penetration testing on its database and tells him that it uses Microsoft SQL Server. As part of the penetration test, Adam wants to obtain complete information about the company’s database.

He uses Nmap to gather this information.

Which of the following Nmap commands will Adam use to obtain the information?

Explanation

Nmap’s ms-sql-info script obtains configuration and version information from Microsoft SQL Server instances. For a default instance, the documented command targets TCP port 1433: nmap -p 1433 --script ms-sql-info <host>. Choice C is the intended selection, although its port number should literally be 1433 rather than 1443. Nmap ms-sql-info NSE documentation

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!