Free Preparation Discussions
MENU
The SecOps Group Exam CNSP Topic 12 Question 4 Discussion
Topic #: 12
If you find the 111/TCP port open on a Unix system, what is the next logical step to take?
Port 111/TCP is the default port for the RPC (Remote Procedure Call) portmapper service on Unix systems, which registers and manages RPC services.
Why A is correct: Running rpcinfo -p <hostname> queries the portmapper to list all registered RPC services, their programs, versions, and associated ports. This is a logical next step during a security audit or penetration test to identify potential vulnerabilities (e.g., NFS or NIS services). CNSP recommends this command for RPC enumeration.
Why other options are incorrect:
B . Telnet to the port to look for a banner: Telnet might connect, but RPC services don't typically provide a human-readable banner, making this less effective than rpcinfo.
C . Telnet to the port, send 'GET / HTTP/1.0' and gather information from the response: Port 111 is not an HTTP service, so an HTTP request is irrelevant and will likely fail.
D . None of the above: Incorrect, as A is a valid and recommended step.
Bernadine
3 months agoLashaun
1 months agoPearlene
1 months agoMarci
1 months agoCarolynn
1 months agoEvelynn
1 months agoRessie
2 months agoFelicitas
2 months agoNoemi
3 months agoLatanya
3 months agoReiko
3 months agoArlette
3 months agoCherelle
3 months agoRefugia
3 months agoVirgie
3 months agoMitzie
3 months agoAlonso
3 months agoAlex
3 months agoAlison
3 months agoJean
4 months agoInocencia
4 months agoJean
4 months ago