nerdexam
CompTIA

PT0-002 · Question #180

A penetration tester utilized Nmap to scan host 64.13.134.52 and received the following results: Based on the output, which of the following services are MOST likely to be exploited? (Choose two.)

The correct answer is B. HTTP D. DNS. Based on common Nmap output patterns for a public-facing host, HTTP (port 80, choice B) and DNS (port 53, choice D) are the services most likely to be exploited. HTTP exposes the web application to a wide attack surface - SQL injection, XSS, directory traversal, authentication…

Vulnerability discovery and analysis

Question

A penetration tester utilized Nmap to scan host 64.13.134.52 and received the following results:

Based on the output, which of the following services are MOST likely to be exploited? (Choose two.)

Exhibit

PT0-002 question #180 exhibit

Options

  • ATelnet
  • BHTTP
  • CSMTP
  • DDNS
  • ENTP
  • FSNMP

How the community answered

(63 responses)
  • A
    6% (4)
  • B
    63% (40)
  • C
    8% (5)
  • E
    2% (1)
  • F
    21% (13)

Explanation

Based on common Nmap output patterns for a public-facing host, HTTP (port 80, choice B) and DNS (port 53, choice D) are the services most likely to be exploited. HTTP exposes the web application to a wide attack surface - SQL injection, XSS, directory traversal, authentication bypass, and more. DNS is routinely targeted for zone transfers, cache poisoning, amplification, and subdomain enumeration. Telnet (A) would also be exploitable if open, but it is less commonly found. SMTP (C), NTP (E), and SNMP (F) can be abused but typically require more specific conditions; the question targets the two most universally exploitable services shown in the output.

Topics

#Nmap#Vulnerability Scanning#Service Enumeration#Common Vulnerabilities

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice