An organization is concerned that its hosted web servers are not running the most updated version of software. Which of the following would work BEST to help identify potential vulnerabilities?

The correct answer is C. nmap comptia.org -p 80 -sV. The nmap command with the -sV flag performs service version detection, identifying the exact software name and version running on the target port (port 80 here). This reveals whether the web server is running an outdated version with known published vulnerabilities. The hping3…

Enterprise Security Operations

Question

Options

Ahping3 -S comptia.org -p 80
Bnc -1 -v comptia.org -p 80
Cnmap comptia.org -p 80 -sV
Dnslookup -port=80 comptia.org

How the community answered

(65 responses)

A
6% (4)
B
12% (8)
C
78% (51)
D
3% (2)

Explanation

The nmap command with the -sV flag performs service version detection, identifying the exact software name and version running on the target port (port 80 here). This reveals whether the web server is running an outdated version with known published vulnerabilities. The hping3 command (A) sends raw SYN packets to test connectivity or probe firewalls - it does not identify software versions. Netcat (B) makes raw TCP connections but performs no version fingerprinting. nslookup (D) is a DNS query tool and cannot probe application services. Only nmap -sV provides the version identification needed to assess whether software is current and potentially vulnerable.

Topics

#nmap#version detection#vulnerability scanning#network reconnaissance

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice