nerdexam
CompTIA

CAS-001 · Question #468

Ann, a systems engineer, is working to identify an unknown node on the corporate network. To begin her investigative work, she runs the following nmap command string: user@hostname:~$ sudo nmap -O…

The correct answer is C. Solaris. The combination of open ports is a classic fingerprint for Solaris or older UNIX systems. TCP/111 is the portmapper/rpcbind service, TCP/2049 is NFS (Network File System), and TCP/32778 is a high-numbered RPC service registered with portmapper - all hallmarks of Solaris's heavy…

Research and Analysis

Question

Ann, a systems engineer, is working to identify an unknown node on the corporate network. To begin her investigative work, she runs the following nmap command string:

user@hostname:~$ sudo nmap -O 192.168.1.54 Based on the output, nmap is unable to identify the OS running on the node, but the following ports are open on the device:

TCP/22 TCP/111 TCP/512-514 TCP/2049 TCP/32778 Based on this information, which of the following operating systems is MOST likely running on the unknown node?

Options

  • ALinux
  • BWindows
  • CSolaris
  • DOSX

How the community answered

(43 responses)
  • A
    2% (1)
  • B
    9% (4)
  • C
    84% (36)
  • D
    5% (2)

Explanation

The combination of open ports is a classic fingerprint for Solaris or older UNIX systems. TCP/111 is the portmapper/rpcbind service, TCP/2049 is NFS (Network File System), and TCP/32778 is a high-numbered RPC service registered with portmapper - all hallmarks of Solaris's heavy reliance on Sun RPC and NFS. TCP/512-514 are the Berkeley r-commands (rexec, rlogin, rsh), which were common in traditional UNIX environments and are strongly associated with Solaris. Linux would typically not expose r-commands by default in modern configurations. Windows does not natively use these services. macOS (OSX) does support some of these but the full combination - especially the r-commands alongside RPC/NFS - strongly points to Solaris.

Topics

#nmap#OS fingerprinting#port analysis#network reconnaissance

Community Discussion

No community discussion yet for this question.

Full CAS-001 Practice