Which of the reconnaissance tools might an attacker use to scan for vulnerable network services and settings? (Choose two.)

Question

Exhibit

Options

• Abandwidth analyzer
• Bintrusion detection
• Cport scanner
• Dpassword cracker

• A
  6% (1)
• B
  6% (1)
• C
  88% (15)

Explanation

Port scanners (C) and password crackers (D) are used during reconnaissance to identify attack surface. A port scanner (e.g., Nmap) probes a target network to discover open ports, running services, and misconfigurations - giving an attacker a map of potential entry points. A password cracker (e.g., Hydra) can systematically test authentication endpoints for weak credentials, effectively scanning for vulnerable login services.

Bandwidth analyzers (A) measure network throughput and traffic volume - useful for performance monitoring, not for discovering vulnerable services. Intrusion detection systems (B) are defensive tools that monitor for attacks; an attacker wouldn't use IDS to conduct reconnaissance.

Memory tip: Think of the attacker's goal - finding doors and weak locks. A port scanner finds the doors (open ports/services), and a password cracker tests the locks (authentication). Bandwidth analyzers and IDS are network management/defense tools, not attacker reconnaissance tools.

No community discussion yet for this question.