312-50V13 · Question #270
Consider the following Nmap output: What command-line parameter could you use to determine the type and version number of the web server?
The correct answer is A. -sv. To determine the type and version of services running on open ports using Nmap, the -sv command-line parameter is used.
Question
Exhibit
Options
- A-sv
- B-Pn
- C-V
- D-ss
How the community answered
(44 responses)- A86% (38)
- B7% (3)
- C5% (2)
- D2% (1)
Why each option
To determine the type and version of services running on open ports using Nmap, the `-sv` command-line parameter is used.
The Nmap `-sv` (Service Version detection) command-line parameter instructs Nmap to attempt to determine the service running on open ports and its version number. This is crucial for identifying the specific type of web server (e.g., Apache, Nginx, IIS) and its version, which can then be cross-referenced with known vulnerabilities.
The `-Pn` (No ping) parameter skips the host discovery phase, treating all hosts as online, and is not used for service version detection.
The `-V` parameter (or `--version`) simply prints the Nmap version number and exits, it does not scan for service versions.
The `-ss` parameter (or `-sS`) specifies a SYN scan (stealth scan), which is a port scanning technique but does not perform service version detection.
Concept tested: Nmap service version detection
Source: https://nmap.org/book/man-version-detection.html
Topics
Community Discussion
No community discussion yet for this question.
