A client has requested that the penetration test scan include the following UDP services: SNMP, NetBIOS, and DNS. Which of the following Nmap commands will perform the scan?

The correct answer is C. nmap -vv sUV -p 53,137-139,161-162 10.10.1.20/24 -oA udpscan. The three requested UDP services map to these well-known ports: DNS = UDP 53, NetBIOS = UDP 137, 138, 139, and SNMP = UDP 161, 162. Only choice C - nmap -vv sUV -p 53,137-139,161-162 - correctly includes all three service port ranges. Choice A (53, 123-159) includes NTP (123)…

Information Gathering and Vulnerability Scanning

Question

Options

Anmap -vv sUV -p 53, 123-159 10.10.1.20/24 -oA udpscan
Bnmap -vv sUV -p 53,123,161-162 10.10.1.20/24 -oA udpscan
Cnmap -vv sUV -p 53,137-139,161-162 10.10.1.20/24 -oA udpscan
Dnmap -vv sUV -p 53, 122-123, 160-161 10.10.1.20/24 -oA udpscan

How the community answered

(45 responses)

A
7% (3)
B
4% (2)
C
78% (35)
D
11% (5)

Explanation

The three requested UDP services map to these well-known ports: DNS = UDP 53, NetBIOS = UDP 137, 138, 139, and SNMP = UDP 161, 162. Only choice C - nmap -vv sUV -p 53,137-139,161-162 - correctly includes all three service port ranges. Choice A (53, 123-159) includes NTP (123) and misses NetBIOS/SNMP correctly. Choice B (53, 123, 161-162) includes NTP and misses NetBIOS entirely. Choice D (53, 122-123, 160-161) uses incorrect port numbers for all three services. The -sU flag enables UDP scanning and -V enables version detection, making the full flag set appropriate for this task.

Topics

#Nmap#UDP Scanning#Port Numbers#Service Enumeration

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice