nerdexam
CompTIA

CAS-003 · Question #77

Ann, a systems engineer, is working to identify an unknown node on the corporate network. To begin her investigative work, she runs the following nmap command string: user@hostname:~$ sudo nmap -O…

The correct answer is C. Solaris. TCP/22 is used for SSH; TCP/111 is used for Sun RPC; TCP/512-514 is used by CMD like exec, but automatic authentication is performed as with a login server, etc. These are all ports that are used when making use of the Sun Solaris operating system.

Enterprise Security Operations

Question

Ann, a systems engineer, is working to identify an unknown node on the corporate network. To begin her investigative work, she runs the following nmap command string:

user@hostname:~$ sudo nmap -O 192.168.1.54 Based on the output, nmap is unable to identify the OS running on the node, but the following ports are open on the device:

TCP/22 TCP/111 TCP/512-514 TCP/2049 TCP/32778 Based on this information, which of the following operating systems is MOST likely running on the unknown node?

Options

  • ALinux
  • BWindows
  • CSolaris
  • DOSX

How the community answered

(24 responses)
  • A
    13% (3)
  • B
    4% (1)
  • C
    58% (14)
  • D
    25% (6)

Explanation

TCP/22 is used for SSH; TCP/111 is used for Sun RPC; TCP/512-514 is used by CMD like exec, but automatic authentication is performed as with a login server, etc. These are all ports that are used when making use of the Sun Solaris operating system.

Topics

#OS fingerprinting#nmap#network reconnaissance#port analysis

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice