312-50V9 · Question #267
An attacker tries to do banner grabbing on a remote web server and executes the following command. $ nmap -sV host.domain.com -p 80 He gets the following output. Nmap scan report for host.domain.com…
The correct answer is B. The hacker successfully completed the banner grabbing. Banner grabbing is the process of retrieving service information from an open port on a remote host. The nmap -sV flag enables version/service detection. The output reveals 'Apache httpd' - which IS a banner. Even though no specific version number (e.g., 2.4.51) was returned…
Question
An attacker tries to do banner grabbing on a remote web server and executes the following command. $ nmap -sV host.domain.com -p 80 He gets the following output. Nmap scan report for host.domain.com (108.61.158.211) Host is up (0.032s latency). PORT STATE SERVICE VERSION 80/tcp open http Apache httpd Nmap done: 1 IP address (1 host up) scanned in 6.42 seconds What did the hacker accomplish?
Options
- Anmap can't retrieve the version number of any running remote service.
- BThe hacker successfully completed the banner grabbing.
- CThe hacker should've used nmap -O host.domain.com.
- DThe hacker failed to do banner grabbing as he didn't get the version of the Apache web server.
How the community answered
(59 responses)- A2% (1)
- B85% (50)
- C5% (3)
- D8% (5)
Explanation
Banner grabbing is the process of retrieving service information from an open port on a remote host. The nmap -sV flag enables version/service detection. The output reveals 'Apache httpd' - which IS a banner. Even though no specific version number (e.g., 2.4.51) was returned, the scan still successfully grabbed the service banner. The server may be configured to suppress its full version string (ServerTokens Prod in Apache), but that does not mean banner grabbing failed - it means the server was hardened. The attacker obtained the service type (Apache HTTP), confirming the banner was retrieved. Choice D is incorrect because incomplete version disclosure does not negate a successful banner grab.
Topics
Community Discussion
No community discussion yet for this question.