ECSA v10: EC-Council Certified Security Analyst v10Demo

By ECCouncil · Question Mode

QuestionQ69

Database Penetration Testing Methodology

Nick is a penetration tester at Stanbiz Ltd. As part of his duties, he was analyzing network traffic by applying various filters in Wireshark. While sniffing network traffic, he used the tcp.port==1433 Wireshark filter to obtain specific database-related information, because port 1433 is the default port for that target database.

Which of the following databases is Nick targeting in his test?

  • A PostgreSQL
  • B Oracle
  • C MySQL
  • D Microsoft SQL Server
Explanation

A default instance of Microsoft SQL Server listens for incoming TCP connections on port 1433. Filtering on tcp.port==1433 therefore targets Microsoft SQL Server traffic.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!