nerdexam
GIAC

GCIA · Question #95

John works as a professional Ethical Hacker for SecureEnet Inc. The company has a Windowsbased network. All client computers run on Windows XP. A project has been assigned to John to investigate about

The correct answer is D. netstat. The netstat command is the standard Windows CLI utility for displaying active network connections and open ports. It is the correct tool for enumerating ports that may be targeted in network attacks.

Packet Analysis with Wireshark & Command Line Tools

Question

John works as a professional Ethical Hacker for SecureEnet Inc. The company has a Windowsbased network. All client computers run on Windows XP. A project has been assigned to John to investigate about the open ports responsible for various malicious attacks on the network. John wants to use the DOS command-line utility to find out the open ports. Which of the following DOS commands will John use to accomplish the task?

Options

  • Atracert and pathping
  • Bnslookup
  • Cnbtstat
  • Dnetstat

How the community answered

(19 responses)
  • A
    5% (1)
  • B
    5% (1)
  • C
    16% (3)
  • D
    74% (14)

Why each option

The netstat command is the standard Windows CLI utility for displaying active network connections and open ports. It is the correct tool for enumerating ports that may be targeted in network attacks.

Atracert and pathping

tracert traces the hop-by-hop route packets take to a remote destination, and pathping combines ping with tracert statistics - neither command enumerates open local ports.

Bnslookup

nslookup is a DNS resolution tool used to query domain names and IP addresses; it provides no information about open ports on the local machine.

Cnbtstat

nbtstat displays NetBIOS over TCP/IP protocol statistics and name cache entries, and is limited to NetBIOS information rather than providing a full listing of open TCP/UDP ports.

DnetstatCorrect

The netstat command (network statistics) displays active TCP/UDP connections, ports the local system is currently listening on, and associated process IDs. Running 'netstat -an' reveals all open ports and their states (LISTENING, ESTABLISHED, etc.), directly fulfilling the task of identifying ports responsible for malicious activity.

Concept tested: Using netstat to enumerate open network ports

Source: https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/netstat

Topics

#netstat#open ports#Windows CLI#port enumeration

Community Discussion

No community discussion yet for this question.

Full GCIA Practice