CompTIA
CS0-003 · Question #139
A security analyst is reviewing the output of tcpdump to analyze the type of activity on a packet capture: Which of the following generated the above output?
The correct answer is A. A port scan. Port scan againts 442-446 ports. For port 443 the scanner closed the connection after SYN-ACK.
Submitted by wei.xz· Mar 6, 2026Security Operations
Question
A security analyst is reviewing the output of tcpdump to analyze the type of activity on a packet capture:
Which of the following generated the above output?
Exhibit
Options
- AA port scan
- BA TLS connection
- CA vulnerability scan
- DA ping sweep
How the community answered
(29 responses)- A83% (24)
- B7% (2)
- C3% (1)
- D7% (2)
Explanation
Port scan againts 442-446 ports. For port 443 the scanner closed the connection after SYN-ACK.
Topics
#packet analysis#tcpdump#port scanning#network reconnaissance
Community Discussion
No community discussion yet for this question.