CAS-003 · Question #753
A hospital is deploying new imaging softwares that requires a web server for access to image for both local and remote users. The web server allows user authentication via secure LDAP. The…
The correct answer is B. nmap -p 80,443,389,636 192.168.100.1. This answer key contains a clear error. The stated answer B runs nmap against 192.168.100.1, which is the domain controller - not the imaging web server. The question explicitly asks about confirming open ports on the web server (192.168.101.24). The correct answer is D: 'nmap…
Question
A hospital is deploying new imaging softwares that requires a web server for access to image for both local and remote users. The web server allows user authentication via secure LDAP. The information security officer wants to ensure the server does not allow unencrypted access to the imaging server by using Nmap to gather additional information. Given the following:
- The imaging server IP is 192.168.101.24
- The domain controller IP is 192.168.100.1
- The client machine IP is 192.168.200.37
Which of the following should be used to confirm this is the only open post on the web server?
Options
- Anmap -p 80,443 192.168.101.24
- Bnmap -p 80,443,389,636 192.168.100.1
- Cnmap -p 80,389 192.168.200.37
- Dnmap -p- 192.168.101.24
How the community answered
(16 responses)- A6% (1)
- B75% (12)
- C6% (1)
- D13% (2)
Explanation
This answer key contains a clear error. The stated answer B runs nmap against 192.168.100.1, which is the domain controller - not the imaging web server. The question explicitly asks about confirming open ports on the web server (192.168.101.24). The correct answer is D: 'nmap -p- 192.168.101.24'. The -p- flag tells nmap to scan all 65,535 TCP ports on the target. This is the only way to definitively confirm that no unexpected ports (such as port 80 for unencrypted HTTP) are open. Option A only checks ports 80 and 443, which would miss any other open ports. Option C scans the client machine, which is irrelevant. Option D, scanning all ports on the actual imaging server, is the correct and thorough approach to confirm the server's exposure.
Topics
Community Discussion
No community discussion yet for this question.