CompTIA PT0-003 Exam - Topic 4 Question 6 Discussion

Actual exam question for CompTIA's PT0-003 exam

Question #: 6
Topic #: 4

A penetration tester is conducting reconnaissance on a target network. The tester runs the following Nmap command: nmap -sv -sT -p - 192.168.1.0/24. Which of the following describes the most likely purpose of this scan?

AOS fingerprinting

BAttack path mapping

CService discovery

DUser enumeration

Show Suggested Answer

Suggested Answer: C

The Nmap command nmap -sv -sT -p- 192.168.1.0/24 is designed to discover services on a network. Here is a breakdown of the command and its purpose:

Command Breakdown:

nmap: The network scanning tool.

-sV: Enables service version detection. This option tells Nmap to determine the version of the services running on open ports.

-sT: Performs a TCP connect scan. This is a more reliable method of scanning as it completes the TCP handshake but can be easily detected by firewalls and intrusion detection systems.

-p-: Scans all 65535 ports. This ensures a comprehensive scan of all possible TCP ports.

192.168.1.0/24: Specifies the target network range (subnet) to be scanned.

Purpose of the Scan:

Service Discovery (Answer: C): The primary purpose of this scan is to discover

Service discovery is a common task in penetration testing to map out the network services and versions, as seen in various Hack The Box (HTB) write-ups where comprehensive service enumeration is performed before further actions.

Conclusion: The nmap -sv -sT -p- 192.168.1.0/24 command is most likely used for service discovery, as it aims to identify all running services and their versions on the target subnet.

by Thora at Aug 08, 2024, 11:56 AM

Limited Time Offer

25%

Off

Get Premium PT0-003 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Sylvie

10 months ago

I’m surprised it’s not just a basic ping sweep!

upvoted 0 times

...

Ivan

10 months ago

Wait, can it really do user enumeration too?

upvoted 0 times

...

Justine

10 months ago

Seems like attack path mapping to me.

upvoted 0 times

...

Evan

10 months ago

I think it’s more about OS fingerprinting.

upvoted 0 times

...

Shaun

11 months ago

Definitely service discovery, that’s what the -sV flag is for.

upvoted 0 times

...

Tawna

11 months ago

I’m a bit confused about the purpose of the scan. Could it also be for OS fingerprinting? I feel like I’ve seen that in other contexts.

upvoted 0 times

...

Rolf

11 months ago

This seems similar to a practice question we did on Nmap scans, and I think service discovery fits best since it’s looking for open ports and services.

upvoted 0 times

...

Janine

11 months ago

I’m not entirely sure, but I think the -sT option indicates a TCP connect scan, which could also suggest it's for mapping services on the network.

upvoted 0 times

...

Vincenza

11 months ago

I remember that the -sV flag is used for service version detection, so it might be related to service discovery.

upvoted 0 times

...

Kayleigh

11 months ago

This looks like a classic network reconnaissance scan to me. The subnet-wide scope and the combination of version detection and TCP connect scanning point to Service discovery as the most likely purpose. I feel pretty confident about that.

upvoted 0 times

...

Odette

11 months ago

I'm a little confused by this question. The Nmap command seems pretty comprehensive, so it could be trying to do OS fingerprinting, service discovery, or even mapping out the attack surface. I'll have to review my notes on Nmap usage to decide.

upvoted 0 times

...

Tamesha

11 months ago

Okay, let's see here. The -sv and -sT options suggest it's trying to identify the operating systems and services on the network. I'd go with Service discovery for this one.

upvoted 0 times

...

Roslyn

11 months ago

Hmm, I'm not sure about this one. The scan seems to be targeting a whole subnet, so maybe it's for attack path mapping? I'll have to think this through a bit more.

upvoted 0 times

...

Rodrigo

11 months ago

This looks like a pretty straightforward Nmap scan to me. I'm pretty confident the answer is Service discovery.

upvoted 0 times

...

Gary

12 months ago

I think this is asking about the integration between vRealize Automation and the VMware Marketplace. Based on the options, it seems like the correct answer would be Orchestrator, since that's the integration component that allows importing Cloud Templates.

upvoted 0 times

...

Vivienne

2 years ago

I think it's for attack path mapping, to understand the potential ways to breach the network.

upvoted 0 times

...

Janine

2 years ago

I believe it could also be for OS fingerprinting, to identify the operating system of the target.

upvoted 0 times

...

Benton

2 years ago

I agree with Giuseppe, the Nmap command is likely used for service discovery.

upvoted 0 times

...

Giuseppe

2 years ago

I think the purpose of this scan is service discovery.

upvoted 0 times

...

Kenneth

2 years ago

I agree with Raymon. Service discovery is the name of the game here. Gotta know what you're dealing with before you can start exploiting anything.

upvoted 0 times

...

Katie

2 years ago

Haha, user enumeration? Really? This is a basic network scan, not a targeted attack. These answer choices are kind of silly.

upvoted 0 times

Thora

2 years ago

C) Service discovery

upvoted 0 times

...

Jodi

2 years ago

A) OS fingerprinting

upvoted 0 times

...

Raymon

2 years ago

The correct answer is C. Service discovery. This scan is just trying to figure out what services are running on the network, not do any kind of enumeration or fingerprinting.

upvoted 0 times

...