Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

CompTIA CNX-001 Exam - Topic 1 Question 16 Discussion

A network engineer is working on securing the environment in the screened subnet. Before penetration testing, the engineer would like to run a scan on the servers to identify the OS, application versions, and open ports. Which of the following commands should the engineer use to obtain the information?
B) nmap -A 10.10.10.0/28
A) tcpdump -ni eth0 src net 10.10.10.0/28
C) nc -v -n 10.10.10.x 1-1000
D) hping3 -1 10.10.10.x -rand-dest -I eth0

CompTIA CNX-001 Exam - Topic 1 Question 16 Discussion

Actual exam question for CompTIA's CNX-001 exam
Question #: 16
Topic #: 1
[All CNX-001 Questions]

A network engineer is working on securing the environment in the screened subnet. Before penetration testing, the engineer would like to run a scan on the servers to identify the OS, application versions, and open ports. Which of the following commands should the engineer use to obtain the information?

Show Suggested Answer Hide Answer
Suggested Answer: B

The -A flag enables aggressive scanning, which combines OS detection, version detection, script scanning, and traceroute to give you detailed information on hosts in the 10.10.10.0/28 range.


by Marge at Mar 30, 2026, 02:57 PM

Limited Time Offer

25%

Off

Get Premium CNX-001 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Felix
4 hours ago
I think B is the best choice. Nmap gives detailed info.
upvoted 0 times
...
Jules
5 days ago
C) seems useful too, but not for full scans like B) does.
upvoted 0 times
...
Erin
10 days ago
Wait, can nmap really do all that? Sounds too good to be true!
upvoted 0 times
...
Dacia
16 days ago
B) is the best choice, no doubt about it!
upvoted 0 times
...
Dalene
2 months ago
I think A) is more for packet capturing, not scanning.
upvoted 0 times
...
Kristel
2 months ago
Definitely B) nmap -A for OS and version detection!
upvoted 0 times
...
Jacinta
3 months ago
I feel like hping3 is more for crafting packets rather than scanning, but I could be mixing it up with something else.
upvoted 0 times
...
Almeta
3 months ago
I practiced a similar question where nmap was the answer too. It seems like the go-to tool for this kind of task.
upvoted 0 times
...
Nan
3 months ago
I'm not entirely sure, but I remember something about using tcpdump for packet analysis, not for scanning.
upvoted 0 times
...
Cecilia
3 months ago
I think the nmap command is the best choice here since it can provide OS detection and version info.
upvoted 0 times
...

Save Cancel