Refer to the exhibit. An attacker infiltrated an organization's network and ran a scan to advance with the lateral movement technique. Which two elements from the scan assists the attacker? (Choose…

The correct answer is B. running services and ports C. function and service the server is providing. The Nmap scan output reveals several open ports (e.g., 135/tcp (msrpc), 139/tcp (netbios-ssn), and 445/tcp (microsoft-ds)), along with the running services. These services are commonly associated with file sharing and remote procedure calls, which could be exploited for lateral…

Submitted by jian89· Mar 6, 2026Network Intrusion Analysis

Question

Refer to the exhibit. An attacker infiltrated an organization's network and ran a scan to advance with the lateral movement technique. Which two elements from the scan assists the attacker? (Choose two.)

Exhibit

Options

Asecurity identifiers of logged-in accounts
Brunning services and ports
Cfunction and service the server is providing
DCPU and vendor version of the asset
Elatency and MS information to calculate delays for a command injection

How the community answered

(20 responses)

A
15% (3)
B
75% (15)
D
5% (1)
E
5% (1)

Explanation

The Nmap scan output reveals several open ports (e.g., 135/tcp (msrpc), 139/tcp (netbios-ssn), and 445/tcp (microsoft-ds)), along with the running services. These services are commonly associated with file sharing and remote procedure calls, which could be exploited for lateral movement across the network. By identifying services such as Microsoft-DS (port 445) and NetBIOS-SSN (port 139), the attacker can infer that the server is likely providing file sharing or remote management functions. This information can help the attacker determine what kind of exploit might be successful for lateral movement.

Topics

#network scanning#lateral movement#reconnaissance#vulnerability assessment

Community Discussion

No community discussion yet for this question.

Full 200-201 Practice