312-50V10 · Question #626
You have initiated an active operating system fingerprinting attempt with nmap against a target system: What operating system is the target host running based on the open ports shown above?
The correct answer is D. Windows 2000 Server. Active OS fingerprinting with nmap identifies the target as Windows 2000 Server based on its characteristic open port and TCP/IP stack signature.
Question
You have initiated an active operating system fingerprinting attempt with nmap against a target system:
What operating system is the target host running based on the open ports shown above?
Exhibit
Options
- AWindows XP
- BWindows 98 SE
- CWindows NT4 Server
- DWindows 2000 Server
How the community answered
(50 responses)- A4% (2)
- B14% (7)
- C8% (4)
- D74% (37)
Why each option
Active OS fingerprinting with nmap identifies the target as Windows 2000 Server based on its characteristic open port and TCP/IP stack signature.
Windows XP presents a different nmap OS fingerprint - it shares some ports but its TCP/IP stack parameters (window size, IP ID sequences) differ enough that nmap distinguishes it from Windows 2000 Server.
Windows 98 SE lacks native SMB over TCP/IP (port 445), does not run server-grade RPC services on port 135, and presents a fundamentally different lightweight port profile that nmap would not match to a server OS.
Windows NT4 Server predates SMB over port 445 and presents older TCP/IP stack characteristics with a different fingerprint pattern that nmap's database distinguishes from Windows 2000.
Windows 2000 Server exposes a distinctive combination of open ports including 135 (RPC endpoint mapper), 139 (NetBIOS Session Service), and 445 (SMB over TCP), along with specific TCP/IP stack behaviors such as TTL values and window sizes that nmap matches against its OS fingerprint database. Nmap's active fingerprinting sends tailored probes and compares responses to its database, uniquely identifying Windows 2000 Server versus other Windows versions.
Concept tested: Nmap active OS fingerprinting and target identification
Source: https://nmap.org/book/man-os-detection.html
Topics
Community Discussion
No community discussion yet for this question.
