nerdexam
GIAC

GCIA · Question #59

Victor works as a professional Ethical Hacker for SecureEnet Inc. He wants to scan the wireless network of the company. He uses a tool that is a free open-source utility for network exploration. The…

The correct answer is B. Nmap. The described tool uses raw IP packets to perform host discovery, port scanning, OS detection, and service version detection - all core capabilities of Nmap. Nmap is also capable of identifying unauthorized wireless access points when used with appropriate scripts.

Network Traffic Analysis & Protocol Review

Question

Victor works as a professional Ethical Hacker for SecureEnet Inc. He wants to scan the wireless network of the company. He uses a tool that is a free open-source utility for network exploration. The tool uses raw IP packets to determine the following:

 What ports are open on our network systems.  What hosts are available on the network.  Identify unauthorized wireless access points.  What services (application name and version) those hosts are offering.  What operating systems (and OS versions) they are running.  What type of packet filters/firewalls are in use. Which of the following tools is Victor using?

Options

  • ANessus
  • BNmap
  • CSniffer
  • DKismet

How the community answered

(31 responses)
  • A
    16% (5)
  • B
    74% (23)
  • C
    3% (1)
  • D
    6% (2)

Why each option

The described tool uses raw IP packets to perform host discovery, port scanning, OS detection, and service version detection - all core capabilities of Nmap. Nmap is also capable of identifying unauthorized wireless access points when used with appropriate scripts.

ANessus

Nessus is a commercial vulnerability scanner that identifies known vulnerabilities and misconfigurations, not a raw-packet network exploration utility in the way described.

BNmapCorrect

Nmap (Network Mapper) is a free, open-source tool that sends raw IP packets to scan networks and report on open ports, available hosts, running services with version info, operating system fingerprints, and firewall configurations. All capabilities listed in the question are documented Nmap features, and it is the industry-standard tool for network exploration and security auditing.

CSniffer

Sniffer (or packet sniffer) passively captures network traffic for analysis; it does not actively send raw IP packets to probe hosts for open ports or OS versions.

DKismet

Kismet is a passive wireless network detector and sniffer focused on 802.11 layer-2 traffic; it does not perform active port scanning or OS fingerprinting via raw IP packets.

Concept tested: Nmap network scanning and host enumeration capabilities

Source: https://nmap.org/book/man.html

Topics

#Nmap#network scanning#port scanning#OS fingerprinting

Community Discussion

No community discussion yet for this question.

Full GCIA Practice