Discuss GAQM CPEH-001 Exam Topic 5 Question 31

What do you conclude from the nmap results below?

Staring nmap V. 3.10ALPHA0 (www.insecure.org/map/)

(The 1592 ports scanned but not shown below are in state: closed)

Port State Service

21/tcp open ftp

25/tcp open smtp

80/tcp open http

443/tcp open https

Remote operating system guess: Too many signatures match the reliability guess the OS. Nmap run completed -- 1 IP address (1 host up) scanned in 91.66 seconds

AThe system is a Windows Domain Controller.

BThe system is not firewalled.

CThe system is not running Linux or Solaris.

DThe system is not properly patched.

Suggested Answer: B

There is no reports of any ports being filtered.

Get Premium CPEH-001 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

15 comments · newest first

Anthony 12 months ago

I doubt it's a Windows Domain Controller based on these results.

Stephaine 12 months ago

I agree, it's probably not Linux or Solaris.

Jamal 1 year ago

Wait, how can they guess the OS with so many matches?

Hailey 1 year ago

Definitely not firewalled, that's for sure.

Lorenza 1 year ago

Looks like ports 21, 25, 80, and 443 are open.

Rachael 1 year ago

I’m leaning towards option B since the nmap results show multiple open ports, which usually means the system is exposed, but I need to double-check my notes on that.

Gary 1 year ago

This reminds me of a practice question where we discussed the implications of open ports. I feel like option C could be correct since it mentions not running Linux or Solaris, but I'm not entirely confident.

Shantay 1 year ago

I think the fact that there are multiple open ports indicates the system might not be firewalled, but I’m a bit uncertain about how to interpret the OS guess.

Ngoc 1 year ago

I remember that open ports like 21, 25, 80, and 443 suggest the system is likely a web server, but I'm not sure about the OS guess.

Dean 1 year ago

I'm pretty sure systemd comes with its own UEFI boot loader, so I'll go with option A.

Rickie 1 year ago

Okay, I think I've got it. I'll need to send the Azure AD access tokens, retrieve the user's group memberships, and then use those groups as a filter for the search requests.

Marshall 1 year ago

I'm leaning towards option D, but I'm a bit confused about whether this is more about alignment or just technical details.

Sheldon 1 year ago

Okay, let's see. The options mention things like management input, identifying control deficiencies, improving the control environment, and increasing control consciousness. I think I have a good understanding of what CSA is, so I should be able to figure this out.

Jaime 1 year ago

I'm a bit unsure about this one. I think policies and networks are definitely synchronized, but I'm not sure about the third component. I'll have to make an educated guess.

Donette 1 year ago

Hmm, I'm not too sure, but I feel like if a bank stopped doing business, that could make the withdrawal effective sooner.

GAQM CPEH-001 Exam - Topic 5 Question 31 Discussion