312-50V11 · Question #957
Shiela is an information security analyst working at HiTech Security Solutions. She is performing service version discovery using Nmap to obtain information about the running services and their…
The correct answer is C. -sV. The Nmap -sV option enables service version detection, identifying the software name and version running on open ports of a target system.
Question
Shiela is an information security analyst working at HiTech Security Solutions. She is performing service version discovery using Nmap to obtain information about the running services and their versions on a target system. Which of the following Nmap options must she use to perform service version discovery on the target host?
Options
- A-SN
- B-SX
- C-sV
- D-SF
How the community answered
(40 responses)- A5% (2)
- B3% (1)
- C90% (36)
- D3% (1)
Why each option
The Nmap -sV option enables service version detection, identifying the software name and version running on open ports of a target system.
-sn (ping scan) is used to discover live hosts on a network without performing any port scanning.
-sX performs an Xmas scan by setting the FIN, PSH, and URG TCP flags simultaneously, used for stealth port state detection.
The -sV flag instructs Nmap to probe open ports in order to determine the exact service name and version information running on those ports. This is Nmap's dedicated service version discovery option and is essential for mapping a target's attack surface. Without -sV, Nmap reports only port state and infers the service solely based on the port number.
-sF performs a FIN scan by sending TCP packets with only the FIN flag set, used for stealth reconnaissance of port states.
Concept tested: Nmap service version detection using -sV flag
Source: https://nmap.org/book/man-version-detection.html
Topics
Community Discussion
No community discussion yet for this question.