A network engineer is working on securing the environment in the screened subnet. Before penetration testing, the engineer would like to run a scan on the servers to identify the OS, application versions, and open ports. Which of the following commands should the engineer use to obtain the information?
Suggested Answer: B
Get Premium CNX-001 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
The -A flag enables aggressive scanning, which combines OS detection, version detection, script scanning, and traceroute to give you detailed information on hosts in the 10.10.10.0/28 range.
12 comments · newest first
SA
Samira
3 months ago
I feel like A could be useful, but it won't give all the details.
SK
Skye
3 months ago
Agreed! Nmap -A is perfect for OS and version detection.
FE
Felix
3 months ago
I think B is the best choice. Nmap gives detailed info.
JU
Jules
3 months ago
C) seems useful too, but not for full scans like B) does.
ER
Erin
3 months ago
Wait, can nmap really do all that? Sounds too good to be true!
DA
Dacia
4 months ago
B) is the best choice, no doubt about it!
DA
Dalene
5 months ago
I think A) is more for packet capturing, not scanning.
KR
Kristel
5 months ago
Definitely B) nmap -A for OS and version detection!
JA
Jacinta
6 months ago
I feel like hping3 is more for crafting packets rather than scanning, but I could be mixing it up with something else.
AL
Almeta
6 months ago
I practiced a similar question where nmap was the answer too. It seems like the go-to tool for this kind of task.
NA
Nan
6 months ago
I'm not entirely sure, but I remember something about using tcpdump for packet analysis, not for scanning.
CE
Cecilia
7 months ago
I think the nmap command is the best choice here since it can provide OS detection and version info.