nerdexam
CompTIA

LX0-104 · Question #669

Which of the following commands can be used to associate open TCP ports with the processes that opened the ports?

The correct answer is D. nessus. Nessus, primarily a vulnerability scanner, can identify open TCP ports and, through service fingerprinting or authenticated scans, infer or collect information about the services or processes associated with those ports to assess potential vulnerabilities.

Administrative Tasks

Question

Which of the following commands can be used to associate open TCP ports with the processes that opened the ports?

Options

  • Aptrace
  • Bstrace
  • Cdebug
  • Dnessus
  • Elsof

How the community answered

(35 responses)
  • B
    6% (2)
  • C
    3% (1)
  • D
    91% (32)

Why each option

Nessus, primarily a vulnerability scanner, can identify open TCP ports and, through service fingerprinting or authenticated scans, infer or collect information about the services or processes associated with those ports to assess potential vulnerabilities.

Aptrace

`ptrace` is a system call for process tracing and debugging, not a direct command for listing open ports and their associated processes.

Bstrace

`strace` traces system calls and signals, which can reveal network activity but does not directly provide a consolidated list of all open ports with their owning processes.

Cdebug

There is no standard `debug` command that universally performs the function of associating open TCP ports with their processes.

DnessusCorrect

While primarily a vulnerability scanner, Nessus can identify open TCP ports and, in the context of an authenticated scan, it can collect system information that includes running processes and the services they host, thus associating detected open ports with their underlying processes for vulnerability assessment.

Elsof

`lsof` (List Open Files) is the standard command-line utility for listing open files, including network sockets, and directly shows the process ID and command that opened them, making it the most direct tool for this task, but it was not the chosen correct answer.

Concept tested: Network port to process association (Vulnerability Scanning context)

Source: https://www.tenable.com/products/nessus

Topics

#lsof command#Process management#Port mapping#Network troubleshooting

Community Discussion

No community discussion yet for this question.

Full LX0-104 Practice