nerdexam
GIAC

GCIH · Question #58

Victor works as a professional Ethical Hacker for SecureEnet Inc. He wants to scan the wireless network of the company. He uses a tool that is a free open-source utility for network exploration. The…

The correct answer is C. Nmap. Nmap is the free, open-source network exploration tool that uses raw IP packets to enumerate open ports, available hosts, services, OS versions, and firewall types.

Reconnaissance, Scanning, and Enumeration

Question

Victor works as a professional Ethical Hacker for SecureEnet Inc. He wants to scan the wireless network of the company. He uses a tool that is a free open-source utility for network exploration. The tool uses raw IP packets to determine the following:

What ports are open on our network systems. What hosts are available on the network. Identify unauthorized wireless access points. What services (application name and version) those hosts are offering. What operating systems (and OS versions) they are running. What type of packet filters/firewalls are in use. Which of the following tools is Victor using?

Options

  • ANessus
  • BKismet
  • CNmap
  • DSniffer

How the community answered

(36 responses)
  • A
    6% (2)
  • B
    3% (1)
  • C
    89% (32)
  • D
    3% (1)

Why each option

Nmap is the free, open-source network exploration tool that uses raw IP packets to enumerate open ports, available hosts, services, OS versions, and firewall types.

ANessus

Nessus is a commercial vulnerability scanner that performs credentialed and uncredentialed audits against known CVEs; it does not primarily rely on raw IP packets for the broad host and port discovery described.

BKismet

Kismet is a passive wireless network detector and packet sniffer focused on 802.11 wireless traffic, and does not actively send raw IP packets to probe hosts, enumerate ports, or perform OS fingerprinting.

CNmapCorrect

Nmap (Network Mapper) is explicitly described in its official documentation as a free, open-source utility for network exploration and security auditing that uses raw IP packets to discover hosts, open ports, running services with version detection, operating system fingerprinting, and firewall/filter identification. This matches every capability listed in the question exactly, making it the definitive answer.

DSniffer

A Sniffer passively captures traffic on a network segment but does not actively send raw IP packets to probe hosts, enumerate open ports, or detect operating systems or firewall configurations.

Concept tested: Nmap capabilities for active network reconnaissance

Source: https://nmap.org/book/man.html

Topics

#Nmap#network scanning#OS fingerprinting#wireless reconnaissance

Community Discussion

No community discussion yet for this question.

Full GCIH Practice