PT0-002 · Question #180
A penetration tester utilized Nmap to scan host 64.13.134.52 and received the following results: Based on the output, which of the following services are MOST likely to be exploited? (Choose two.)
The correct answer is B. HTTP D. DNS. Based on common Nmap output patterns for a public-facing host, HTTP (port 80, choice B) and DNS (port 53, choice D) are the services most likely to be exploited. HTTP exposes the web application to a wide attack surface - SQL injection, XSS, directory traversal, authentication…
Question
A penetration tester utilized Nmap to scan host 64.13.134.52 and received the following results:
Based on the output, which of the following services are MOST likely to be exploited? (Choose two.)
Exhibit
Options
- ATelnet
- BHTTP
- CSMTP
- DDNS
- ENTP
- FSNMP
How the community answered
(63 responses)- A6% (4)
- B63% (40)
- C8% (5)
- E2% (1)
- F21% (13)
Explanation
Based on common Nmap output patterns for a public-facing host, HTTP (port 80, choice B) and DNS (port 53, choice D) are the services most likely to be exploited. HTTP exposes the web application to a wide attack surface - SQL injection, XSS, directory traversal, authentication bypass, and more. DNS is routinely targeted for zone transfers, cache poisoning, amplification, and subdomain enumeration. Telnet (A) would also be exploitable if open, but it is less commonly found. SMTP (C), NTP (E), and SNMP (F) can be abused but typically require more specific conditions; the question targets the two most universally exploitable services shown in the output.
Topics
Community Discussion
No community discussion yet for this question.
