nerdexam
CompTIA

PT0-002 · Question #187

A penetration tester receives the following results from an Nmap scan: Which of the following OSs is the target MOST likely running?

The correct answer is C. Windows Server. The Nmap scan results, particularly the open ports 135 (MSRPC), 139 (NetBIOS-SSN), 445 (SMB), and 3389 (RDP), are characteristic of a Windows operating system. These services are commonly used for remote administration, file sharing, and directory services on Windows…

Reconnaissance and enumeration

Question

A penetration tester receives the following results from an Nmap scan:

Which of the following OSs is the target MOST likely running?

Exhibit

PT0-002 question #187 exhibit

Options

  • ACentOS
  • BArch Linux
  • CWindows Server
  • DUbuntu

How the community answered

(24 responses)
  • A
    8% (2)
  • B
    17% (4)
  • C
    71% (17)
  • D
    4% (1)

Why each option

The Nmap scan results, particularly the open ports 135 (MSRPC), 139 (NetBIOS-SSN), 445 (SMB), and 3389 (RDP), are characteristic of a Windows operating system. These services are commonly used for remote administration, file sharing, and directory services on Windows environments.

ACentOS

CentOS, like other Linux distributions, would typically have different open ports for common services such as SSH (22) and HTTP(S) (80/443), but not commonly MSRPC, NetBIOS-SSN, SMB, or RDP as core services.

BArch Linux

Arch Linux, similar to CentOS, is a Linux distribution and would present with typical Linux service ports like SSH, not natively exposing the combination of MSRPC, NetBIOS, SMB, and RDP.

CWindows ServerCorrect

The Nmap scan results showing open ports 135 (MSRPC), 139 (NetBIOS Session Service), 445 (SMB/CIFS), and 3389 (Microsoft Remote Desktop Protocol - RDP) are highly indicative of a Windows operating system. These ports are standard for Windows domain services, file sharing, and remote access, especially on Windows Server editions.

DUbuntu

Ubuntu, also a Linux distribution, would show open ports typical for Linux systems such as SSH; the specific combination of MSRPC, NetBIOS, SMB, and RDP ports strongly points away from a default or typical Linux configuration.

Concept tested: Nmap OS detection and port identification

Source: https://nmap.org/book/man-os-detection.html

Topics

#Nmap#OS Fingerprinting#Active Reconnaissance#Enumeration

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice