nerdexam
CompTIA

CAS-003 · Question #186

Company policy requires that all unsupported operating systems be removed from the network. The security administrator is using a combination of network based tools to identify such systems for the…

The correct answer is A. Passive banner grabbing F. 09:18:16.262743 IP (tos 0x0, ttl 64, id 9870, offset 0, flags [none], proto TCP (6), length G. Nmap. Banner grabbing and operating system identification can also be defined as fingerprinting the TCP/IP stack. Banner grabbing is the process of opening a connection and reading the banner or response sent by the application. The output displayed in option F includes information…

Enterprise Security Operations

Question

Company policy requires that all unsupported operating systems be removed from the network. The security administrator is using a combination of network based tools to identify such systems for the purpose of disconnecting them from the network. Which of the following tools, or outputs from the tools in use, can be used to help the security administrator make an approximate determination of the operating system in use on the local company network? (Select THREE).

Options

  • APassive banner grabbing
  • BPassword cracker
  • D443/tcp open http
  • Edig host.company.com
  • F09:18:16.262743 IP (tos 0x0, ttl 64, id 9870, offset 0, flags [none], proto TCP (6), length
  • GNmap

How the community answered

(33 responses)
  • A
    82% (27)
  • B
    6% (2)
  • D
    9% (3)
  • E
    3% (1)

Explanation

Banner grabbing and operating system identification can also be defined as fingerprinting the TCP/IP stack. Banner grabbing is the process of opening a connection and reading the banner or response sent by the application. The output displayed in option F includes information commonly examined to fingerprint the OS. Nmap provides features that include host discovery, as well as service and operating system

Topics

#OS fingerprinting#passive banner grabbing#Nmap#TTL analysis

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice