nerdexam
EC-Council

312-50V10 · Question #626

You have initiated an active operating system fingerprinting attempt with nmap against a target system: What operating system is the target host running based on the open ports shown above?

The correct answer is D. Windows 2000 Server. Active OS fingerprinting with nmap identifies the target as Windows 2000 Server based on its characteristic open port and TCP/IP stack signature.

Scanning Networks

Question

You have initiated an active operating system fingerprinting attempt with nmap against a target system:

What operating system is the target host running based on the open ports shown above?

Exhibit

312-50V10 question #626 exhibit

Options

  • AWindows XP
  • BWindows 98 SE
  • CWindows NT4 Server
  • DWindows 2000 Server

How the community answered

(50 responses)
  • A
    4% (2)
  • B
    14% (7)
  • C
    8% (4)
  • D
    74% (37)

Why each option

Active OS fingerprinting with nmap identifies the target as Windows 2000 Server based on its characteristic open port and TCP/IP stack signature.

AWindows XP

Windows XP presents a different nmap OS fingerprint - it shares some ports but its TCP/IP stack parameters (window size, IP ID sequences) differ enough that nmap distinguishes it from Windows 2000 Server.

BWindows 98 SE

Windows 98 SE lacks native SMB over TCP/IP (port 445), does not run server-grade RPC services on port 135, and presents a fundamentally different lightweight port profile that nmap would not match to a server OS.

CWindows NT4 Server

Windows NT4 Server predates SMB over port 445 and presents older TCP/IP stack characteristics with a different fingerprint pattern that nmap's database distinguishes from Windows 2000.

DWindows 2000 ServerCorrect

Windows 2000 Server exposes a distinctive combination of open ports including 135 (RPC endpoint mapper), 139 (NetBIOS Session Service), and 445 (SMB over TCP), along with specific TCP/IP stack behaviors such as TTL values and window sizes that nmap matches against its OS fingerprint database. Nmap's active fingerprinting sends tailored probes and compares responses to its database, uniquely identifying Windows 2000 Server versus other Windows versions.

Concept tested: Nmap active OS fingerprinting and target identification

Source: https://nmap.org/book/man-os-detection.html

Topics

#OS fingerprinting#nmap#active fingerprinting#open port analysis

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice