Eccouncil ECSS Exam - Topic 8 Question 111 Discussion

Actual exam question for Eccouncil's ECSS exam

Question #: 111
Topic #: 8

Michael, a forensic expert, was assigned to investigate an incident that involved unauthorized intrusion attempts. In this process, Michael identified all the open ports on a system and disabled them because these open ports can allow attackers to install malicious services and compromise the security of the system or network.

Which of the following commands assisted Michael in identifying open ports in the above scenario?

Anmap -sT localhost

Bnetstat -i

Cilconfig promise

Dnetstat rn

Show Suggested Answer

Suggested Answer: B

Michael used thenetstatcommand with the-ioption to identify open ports on the system. The-iflag displays network interfaces and their statistics, including information about open ports. By analyzing this output, Michael could determine which ports were active and potentially vulnerable to unauthorized access.

EC-Council Certified Security Specialist (E|CSS) course materials and study guide12.

EC-Council Certified Security Specialist (ECSS) program information1.

EC-Council ECSS Certification Syllabus and Prep Guide.

EC-Council ECSS Certification Sample Questions and Practice Exam.

EC-Council ECSS brochure3.

by Ernest at Nov 22, 2025, 08:45 AM

Limited Time Offer

25%

Off

Get Premium ECSS Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Gracie

1 month ago

Definitely A. Nmap is essential for security assessments.

upvoted 0 times

...

Stephanie

2 months ago

D) netstat rn? That’s not relevant either. It’s about routing, not ports.

upvoted 0 times

...

Ozell

2 months ago

C) ilconfig promise doesn’t even sound right. It’s not a valid command.

upvoted 0 times

...

Bulah

2 months ago

I’m not sure about B) netstat -i. It shows interfaces, not open ports.

upvoted 0 times

...

Judy

2 months ago

Agreed! Nmap is a go-to tool for this. It gives detailed results.

upvoted 0 times

...

Cheryl

2 months ago

Not sure if nmap is the best for local scans, though...

upvoted 0 times

...

Berry

2 months ago

Wait, can you really disable ports just like that?

upvoted 0 times

...

Meaghan

3 months ago

A) is the right choice, no doubt!

upvoted 0 times

...

Marya

3 months ago

I thought netstat was the go-to for this?

upvoted 0 times

...

Quinn

3 months ago

Definitely A) nmap -sT localhost for scanning open ports.

upvoted 0 times

...

Pilar

4 months ago

Haha, "ilconfig promise"? Really? That's not even a real command.

upvoted 0 times

...

Darrin

4 months ago

I agree, A is the right answer. Nmap is a powerful network scanning tool.

upvoted 0 times

...

Alonso

4 months ago

Definitely A. Nmap is the go-to tool for port scanning and identifying open ports.

upvoted 0 times

...

Justine

4 months ago

I feel like I’ve seen similar questions before, and netstat is often mentioned, but I can't recall if it was netstat -i or another variant.

upvoted 0 times

...

Billye

4 months ago

I remember that nmap is commonly used for scanning, so I would lean towards option A, but I’m not entirely sure about the syntax.

upvoted 0 times

...

Annett

4 months ago

I vaguely recall practicing with netstat commands, but I don't think netstat -i is the right one for open ports.

upvoted 0 times

...

Norah

5 months ago

I'm pretty confident the nmap command is the right answer. It's a standard tool for port scanning and network reconnaissance.

upvoted 0 times

...

Janet

5 months ago

Hmm, I'm not familiar with the ilconfig promise command. That one seems a bit unusual compared to the other options.

upvoted 0 times

...

Meghann

5 months ago

The netstat command looks promising. I'd try the -i or -rn options to get information about the network interfaces and routing table.

upvoted 0 times

...

Lynsey

5 months ago

I think A) nmap -sT localhost is the right choice. It scans for open ports effectively.

upvoted 0 times

...

Terrilyn

5 months ago

A) nmap -sT localhost is the correct command to identify open ports.

upvoted 0 times

...

Martha

6 months ago

I think the command to identify open ports is probably nmap, but I can't remember if it's -sT or something else.

upvoted 0 times

...

Murray

6 months ago

Netstat is useful, but nmap is the way to go for comprehensive port scanning.

upvoted 0 times

...

Jacqueline

6 months ago

I'm a bit confused about the question. Is it asking about the specific command Michael used, or just the general type of command that would identify open ports?

upvoted 0 times

...