CAS-003 · Question #1
A security consultant is attempting to discover if the company is utilizing databases on client machines to store the customer data. The consultant reviews the following information: Which of the…
The correct answer is B. netstat -a. The netstat -a command displays all active TCP/UDP connections and listening ports, which reveals whether database services are running on client machines.
Question
A security consultant is attempting to discover if the company is utilizing databases on client machines to store the customer data. The consultant reviews the following information:
Which of the following commands would have provided this output?
Exhibit
Options
- Aarp -s
- Bnetstat -a
- Cifconfig -arp
- Dsqlmap -w
How the community answered
(41 responses)- A5% (2)
- B85% (35)
- C7% (3)
- D2% (1)
Why each option
The netstat -a command displays all active TCP/UDP connections and listening ports, which reveals whether database services are running on client machines.
arp -s adds a static entry to the ARP cache and does not display connection or port information.
netstat -a lists all active connections and all listening ports on a host, including database ports such as 1433 (MSSQL), 3306 (MySQL), and 5432 (PostgreSQL). By reviewing this output, a consultant can determine whether a local database service is running and accepting connections, which is exactly what the question describes.
ifconfig is used to configure or display network interface parameters and does not show active connections or listening services.
sqlmap is a SQL injection exploitation tool used to attack databases, not to passively enumerate running services on a host.
Concept tested: Using netstat to identify local database services
Source: https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/netstat
Topics
Community Discussion
No community discussion yet for this question.