PT0-002 Question #494: Real Exam Question with Answer & Explanation

Question

A penetration tester wants to identify the most common TCP ports on 10.7.8.69. Which of the following is the best Nmap command for this task?

Options

• Anmap 10.7.8.69 -sS -sA -sV -F
• Bnmap 10.7.8.69 -sT -sA -p1-65535
• Cnmap 10.7.8.69 -sC -sV -Pn
• Dnmap 10.7.8.69 -sX -sU --top-ports

Explanation

{"question_number": 9, "question": "A penetration tester wants to identify the most common TCP ports on 10.7.8.69. Which of the following is the best Nmap command for this task?", "correct_answer": "A", "correct_answer_text": "nmap 10.7.8.69 -sS -sA -sV -F", "explanation": "The -F (fast) flag is the key differentiator here - it instructs Nmap to scan only the top 100 most common ports as defined by Nmap's built-in port frequency database, directly matching the goal of identifying the 'most common TCP ports.' The -sS flag performs a stealthy SYN scan, and -sV adds service version detection. Choice B uses -p1-65535 to scan all 65535 ports, which is the opposite of focusing on the most common ones. Choice C uses -sC (default scripts) and -Pn (skip host discovery) but scans Nmap's default 1000 ports - not specifically the 'most common' in the compact sense -F provides. Choice D uses -sX (Xmas scan) and -sU (UDP), neither of which is the right approach for identifying common TCP ports quickly.", "generated_by": "claude-sonnet", "llm_judge_score": 3}

No community discussion yet for this question.