nerdexam
EC-Council

312-50V10 · Question #766

Which utility will tell you in real time which ports are listening or in another state?

The correct answer is D. TCPView. TCPView is the Sysinternals utility that provides a continuously refreshed, real-time view of all TCP and UDP endpoints and their current states. The other tools are either static, off-target, or scanner-based.

Scanning Networks

Question

Which utility will tell you in real time which ports are listening or in another state?

Options

  • ANetsat
  • BLoki
  • CNmap
  • DTCPView

How the community answered

(46 responses)
  • A
    2% (1)
  • B
    9% (4)
  • C
    2% (1)
  • D
    87% (40)

Why each option

TCPView is the Sysinternals utility that provides a continuously refreshed, real-time view of all TCP and UDP endpoints and their current states. The other tools are either static, off-target, or scanner-based.

ANetsat

Netstat (likely intended here, as 'Netsat' is a misspelling) produces a static point-in-time snapshot of connections and requires manual re-execution to see changes, so it does not provide a real-time continuous display.

BLoki

Loki is a tool designed to detect covert channels over ICMP, not a general-purpose utility for monitoring local TCP/UDP port states.

CNmap

Nmap is an active network scanner used for host discovery and port enumeration on remote targets, not a real-time live monitor of local port states.

DTCPViewCorrect

TCPView (part of the Microsoft Sysinternals suite) displays a live, dynamically updated list of all TCP and UDP connections on the local system, including local and remote addresses, port numbers, and real-time connection states such as LISTENING, ESTABLISHED, and CLOSE_WAIT. Its continuous refresh capability makes it the correct tool when you need to observe port states as they change in real time.

Concept tested: Real-time TCP/UDP port state monitoring with TCPView

Source: https://learn.microsoft.com/en-us/sysinternals/downloads/tcpview

Topics

#TCPView#port monitoring#real-time connections#network state

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice