PT0-002 · Question #232
The results of an Nmap scan are as follows: Which of the following device types will MOST likely have a similar response?
The correct answer is B. IoT/embedded device. IoT/embedded devices typically present a limited number of open ports and services, reflecting their specialized, resource-constrained nature, which is distinct from general-purpose servers or network services.
Question
The results of an Nmap scan are as follows:
Which of the following device types will MOST likely have a similar response?
Options
- AActive Directory domain controller
- BIoT/embedded device
- CExposed RDP
- DPrint queue
How the community answered
(41 responses)- A10% (4)
- B83% (34)
- C2% (1)
- D5% (2)
Why each option
IoT/embedded devices typically present a limited number of open ports and services, reflecting their specialized, resource-constrained nature, which is distinct from general-purpose servers or network services.
Active Directory domain controllers expose numerous specific ports and services for directory, authentication, and file sharing (e.g., LDAP, Kerberos, SMB, DNS).
IoT/embedded devices are designed for specific functions and often have minimal services exposed, showing fewer open ports and potentially custom or older service banners in an Nmap scan compared to full-fledged operating systems or servers. Their scan responses typically reflect a constrained environment with limited network functionality.
An exposed RDP service would specifically show port 3389 open and potentially the service banner for RDP.
Print queues would typically expose common printing ports like 9100 (raw), 515 (LPR), 631 (IPP), or 445 (SMB for shared printers).
Concept tested: Nmap scan interpretation for device types
Source: https://nmap.org/book/man-os-detection.html
Topics
Community Discussion
No community discussion yet for this question.