EC-CouncilEC-Council
312-50V13 · Question #167
312-50V13 Question #167: Real Exam Question with Answer & Explanation
The correct answer is B: TCPView. TCPView is a real-time graphical utility for Windows that displays all active TCP and UDP connections and listening ports, along with the processes using them.
Submitted by thandi_sa· Mar 6, 2026Scanning Networks
Question
Which utility will tell you in real time which ports are listening or in another state?
Options
- ANetstat
- BTCPView
- CNmap
- DLoki
Explanation
TCPView is a real-time graphical utility for Windows that displays all active TCP and UDP connections and listening ports, along with the processes using them.
Common mistakes.
- A. Netstat is a command-line utility available across various operating systems that provides a snapshot of network connections and listening ports at the time of execution, but it does not offer a continuous, real-time graphical update like TCPView.
- C. Nmap (Network Mapper) is primarily a network scanning tool used to discover hosts and services on a computer network by sending packets and analyzing their responses, typically used for external reconnaissance rather than real-time monitoring of local system ports.
- D. Loki is a host-based scanner designed to detect indicators of compromise (IOCs) on a system, such as known malware artifacts or suspicious processes, but it is not a real-time network connection monitoring utility.
Concept tested. Network connection monitoring utilities
Reference. https://learn.microsoft.com/en-us/sysinternals/downloads/tcpview
Topics
#Port monitoring#Network utilities#System monitoring#Netstat
Community Discussion
No community discussion yet for this question.