PCCET Question #140: Real Exam Question with Answer & Explanation

Question

Drag and Drop Question Match each tool to its capability. Answer:

Explanation

This question tests knowledge of core network security and reconnaissance tools — specifically what each tool is designed to do. Understanding tool capabilities is foundational for both offensive security work and defensive analysis.

Approach. Wireshark is a packet capture and network protocol analyzer — it inspects live or captured traffic at the packet level. Nessus is a vulnerability scanner that probes systems for known CVEs, misconfigurations, and security weaknesses. Nmap (Network Mapper) is a port scanner that discovers open ports, running services, and OS fingerprints on target hosts. Each tool occupies a distinct layer of the reconnaissance and assessment workflow: Nmap maps the attack surface, Nessus audits it for vulnerabilities, and Wireshark inspects the traffic flowing across it.

Concept tested. Security tool classification — distinguishing between a network protocol analyzer (Wireshark), a vulnerability scanner (Nessus), and a port/service scanner (Nmap)

Reference. CompTIA Security+ SY0-701 Domain 4.0 — Security Operations; also covered in CEH and OSCP curricula under enumeration and scanning phases

No community discussion yet for this question.