An attacker tries to do banner grabbing on a remote web server and executes the following command. $ nmap -sV host.domain.com -p 80 He gets the following output. scan report for host.domain.com…

Question

Options

• Anmap can't retrieve the version number of any running remote service.
• BThe hacker successfully completed the banner grabbing.
• CThe hacker should've used nmap -O host.domain.com.
• DThe hacker failed to do banner grabbing as he didn't get the version of the Apache web server.

• A
  14% (3)
• B
  82% (18)
• D
  5% (1)

Explanation

Banner grabbing is the technique of retrieving identifying information from a service's response header or banner. The nmap -sV flag performs version/service detection, and the output confirms the host is up, port 80 is open, and the service is 'Apache httpd' - this IS banner grabbing succeeding. The server may have suppressed its exact version string (a common hardening technique), but the attacker still obtained meaningful banner data (service name). Choice D is a common trap: not getting a full version number does not mean banner grabbing failed - it means the server is partially hardened. Choice A is false; nmap -sV regularly retrieves service info. Choice C (-O) is for OS fingerprinting, not banner grabbing.

No community discussion yet for this question.