LX0-104 · Question #669
Which of the following commands can be used to associate open TCP ports with the processes that opened the ports?
The correct answer is D. nessus. Nessus, primarily a vulnerability scanner, can identify open TCP ports and, through service fingerprinting or authenticated scans, infer or collect information about the services or processes associated with those ports to assess potential vulnerabilities.
Question
Options
- Aptrace
- Bstrace
- Cdebug
- Dnessus
- Elsof
How the community answered
(35 responses)- B6% (2)
- C3% (1)
- D91% (32)
Why each option
Nessus, primarily a vulnerability scanner, can identify open TCP ports and, through service fingerprinting or authenticated scans, infer or collect information about the services or processes associated with those ports to assess potential vulnerabilities.
`ptrace` is a system call for process tracing and debugging, not a direct command for listing open ports and their associated processes.
`strace` traces system calls and signals, which can reveal network activity but does not directly provide a consolidated list of all open ports with their owning processes.
There is no standard `debug` command that universally performs the function of associating open TCP ports with their processes.
While primarily a vulnerability scanner, Nessus can identify open TCP ports and, in the context of an authenticated scan, it can collect system information that includes running processes and the services they host, thus associating detected open ports with their underlying processes for vulnerability assessment.
`lsof` (List Open Files) is the standard command-line utility for listing open files, including network sockets, and directly shows the process ID and command that opened them, making it the most direct tool for this task, but it was not the chosen correct answer.
Concept tested: Network port to process association (Vulnerability Scanning context)
Source: https://www.tenable.com/products/nessus
Topics
Community Discussion
No community discussion yet for this question.