SIMULATION You are a penetration tester who is reviewing the system hardening guidelines for a company's distribution center. The company's hardening guidelines indicate the following: - There must be one primary server or service per device. - Only default ports should be used. - Non-secure protocols should be disabled. - The corporate Internet presence should be placed in a protected subnet. INSTRUCTIONS Using the tools available, discover devices on the corporate network and the services that are running on these devices. You must determine: - The IP address of each device. - The primary server or service of each device. - The protocols that should be disabled based on the hardening guidelines. If at any time you would like to bring back the initial state of the simulation, please click the Reset All button. Answer:

CompTIA

CS0-003 · Question #243

SIMULATION You are a penetration tester who is reviewing the system hardening guidelines for a company's distribution center. The company's hardening guidelines indicate the following: - There must…

Submitted by tom_us· Mar 6, 2026CompTIA PenTest+ / Security+ - Vulnerability Scanning and Penetration Testing Tools; System Hardening and Network Security Controls (e.g., PT0-002 Domain 2: Reconnaissance & Enumeration; SY0-701 Domain 4: Security Operations)

Question

SIMULATION You are a penetration tester who is reviewing the system hardening guidelines for a company's distribution center. The company's hardening guidelines indicate the following:

There must be one primary server or service per device.
Only default ports should be used.
Non-secure protocols should be disabled.
The corporate Internet presence should be placed in a protected subnet.

INSTRUCTIONS Using the tools available, discover devices on the corporate network and the services that are running on these devices. You must determine:

The IP address of each device.
The primary server or service of each device.
The protocols that should be disabled based on the hardening guidelines.

If at any time you would like to bring back the initial state of the simulation, please click the Reset All button. Answer:

Exhibit

Explanation

This simulation requires a methodical penetration testing approach: first conducting a non-credentialed network scan to discover all live hosts and open ports, then performing credentialed scans to enumerate services in detail, and finally running a compliance scan to compare findings against the hardening guidelines. The correct process identifies each device's IP, its primary service, and flags violations such as non-secure protocols (e.g., Telnet, FTP, HTTP) running alongside or instead of their secure equivalents (SSH, SFTP, HTTPS), multiple services on one device, non-default ports, and internet-facing services not placed in a DMZ or protected subnet. These steps together satisfy all four hardening criteria stated in the guidelines.

Topics

#Network Scanning#System Hardening#Penetration Testing Methodology#Protocol Security

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice