200-201 · Question #333
Refer to the exhibit. An attacker gained initial access to the company's network and ran an Nmap scan to advance with the lateral movement technique and to search the sensitive data. Which two…
The correct answer is B. functionality and purpose of the server D. running services. From an Nmap scan, an attacker can identify the running services on a server and infer its functionality and purpose, aiding in lateral movement and data search.
Question
Refer to the exhibit. An attacker gained initial access to the company's network and ran an Nmap scan to advance with the lateral movement technique and to search the sensitive data. Which two elements can an attacker identify from the scan? (Choose two.)
Exhibit
Options
- Aworkload and the configuration details
- Bfunctionality and purpose of the server
- Cnumber of users and requests that the server is handling
- Drunning services
- Euser accounts and SID
How the community answered
(15 responses)- A7% (1)
- B80% (12)
- E13% (2)
Why each option
From an Nmap scan, an attacker can identify the running services on a server and infer its functionality and purpose, aiding in lateral movement and data search.
Nmap scans typically do not directly reveal a server's workload or intricate configuration details beyond what is exposed through service banners.
By identifying open ports and the services running on them (e.g., HTTP on port 80, SQL on port 1433), an attacker can infer the primary functionality and purpose of a server, such as if it's a web server or a database server.
Nmap does not directly provide information about the number of users or real-time requests a server is handling; this requires performance monitoring tools or application-level interaction.
Nmap's service detection feature identifies the specific applications and their versions running on open ports. Knowing the running services is crucial for an attacker to find potential vulnerabilities and plan further attacks.
Nmap cannot enumerate user accounts or Security Identifiers (SIDs) from a standard port scan; this typically requires authenticated access or specific enumeration tools targeting protocols like SMB or LDAP.
Concept tested: Nmap scan output interpretation (services, server purpose)
Source: https://nmap.org/book/man-service-detection.html
Topics
Community Discussion
No community discussion yet for this question.