nerdexam
EC-Council

312-50V11 · Question #766

Which utility will tell you in real time which ports are listening or in another state?

The correct answer is D. TCPView. TCPView is the correct utility because it provides a continuously auto-refreshing, real-time view of all TCP and UDP endpoints and their current connection states on a local Windows system.

Scanning Networks

Question

Which utility will tell you in real time which ports are listening or in another state?

Options

  • ANetsat
  • BLoki
  • CNmap
  • DTCPView

How the community answered

(44 responses)
  • A
    2% (1)
  • B
    9% (4)
  • C
    2% (1)
  • D
    86% (38)

Why each option

TCPView is the correct utility because it provides a continuously auto-refreshing, real-time view of all TCP and UDP endpoints and their current connection states on a local Windows system.

ANetsat

'Netsat' appears to be a misspelling of Netstat; Netstat provides only a static snapshot of connections at the moment the command is executed and does not update automatically in real time.

BLoki

Loki is a security tool associated with covert channel analysis and rootkit detection, not a real-time utility for monitoring local TCP/UDP port states.

CNmap

Nmap is a network scanner used to discover open ports on remote hosts through active probing, not a real-time monitor of connection state changes on the local system.

DTCPViewCorrect

TCPView, part of the Microsoft Sysinternals suite, displays all active TCP and UDP connections with local and remote addresses, port numbers, and states such as LISTENING, ESTABLISHED, and CLOSE_WAIT, and updates the display in real time without requiring repeated manual execution. This makes it the appropriate tool when continuous, live port state monitoring is required.

Concept tested: Real-time port and connection state monitoring with TCPView

Source: https://learn.microsoft.com/en-us/sysinternals/downloads/tcpview

Topics

#TCPView#port monitoring#real-time monitoring#network utilities

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice