nerdexam
EC-CouncilEC-Council

312-50V13 · Question #167

312-50V13 Question #167: Real Exam Question with Answer & Explanation

The correct answer is B: TCPView. TCPView is a real-time graphical utility for Windows that displays all active TCP and UDP connections and listening ports, along with the processes using them.

Submitted by thandi_sa· Mar 6, 2026Scanning Networks

Question

Which utility will tell you in real time which ports are listening or in another state?

Options

  • ANetstat
  • BTCPView
  • CNmap
  • DLoki

Explanation

TCPView is a real-time graphical utility for Windows that displays all active TCP and UDP connections and listening ports, along with the processes using them.

Common mistakes.

  • A. Netstat is a command-line utility available across various operating systems that provides a snapshot of network connections and listening ports at the time of execution, but it does not offer a continuous, real-time graphical update like TCPView.
  • C. Nmap (Network Mapper) is primarily a network scanning tool used to discover hosts and services on a computer network by sending packets and analyzing their responses, typically used for external reconnaissance rather than real-time monitoring of local system ports.
  • D. Loki is a host-based scanner designed to detect indicators of compromise (IOCs) on a system, such as known malware artifacts or suspicious processes, but it is not a real-time network connection monitoring utility.

Concept tested. Network connection monitoring utilities

Reference. https://learn.microsoft.com/en-us/sysinternals/downloads/tcpview

Topics

#Port monitoring#Network utilities#System monitoring#Netstat

Community Discussion

No community discussion yet for this question.

Full 312-50V13 PracticeBrowse All 312-50V13 Questions