GCIA · Question #95
John works as a professional Ethical Hacker for SecureEnet Inc. The company has a Windowsbased network. All client computers run on Windows XP. A project has been assigned to John to investigate about
The correct answer is D. netstat. The netstat command is the standard Windows CLI utility for displaying active network connections and open ports. It is the correct tool for enumerating ports that may be targeted in network attacks.
Question
John works as a professional Ethical Hacker for SecureEnet Inc. The company has a Windowsbased network. All client computers run on Windows XP. A project has been assigned to John to investigate about the open ports responsible for various malicious attacks on the network. John wants to use the DOS command-line utility to find out the open ports. Which of the following DOS commands will John use to accomplish the task?
Options
- Atracert and pathping
- Bnslookup
- Cnbtstat
- Dnetstat
How the community answered
(19 responses)- A5% (1)
- B5% (1)
- C16% (3)
- D74% (14)
Why each option
The netstat command is the standard Windows CLI utility for displaying active network connections and open ports. It is the correct tool for enumerating ports that may be targeted in network attacks.
tracert traces the hop-by-hop route packets take to a remote destination, and pathping combines ping with tracert statistics - neither command enumerates open local ports.
nslookup is a DNS resolution tool used to query domain names and IP addresses; it provides no information about open ports on the local machine.
nbtstat displays NetBIOS over TCP/IP protocol statistics and name cache entries, and is limited to NetBIOS information rather than providing a full listing of open TCP/UDP ports.
The netstat command (network statistics) displays active TCP/UDP connections, ports the local system is currently listening on, and associated process IDs. Running 'netstat -an' reveals all open ports and their states (LISTENING, ESTABLISHED, etc.), directly fulfilling the task of identifying ports responsible for malicious activity.
Concept tested: Using netstat to enumerate open network ports
Source: https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/netstat
Topics
Community Discussion
No community discussion yet for this question.