While performing reconnaissance, a penetration tester runs Nmap and receives the following output:

Nmap scan report for samplescan.org (44.33.55.66) Host is up (0.025s latency). Not shown: 992 closed tcp ports (conn-refused) PORT STATE 22/tcp open 23/tcp open 80/tcp open 443/tcp open Nmap done: 1 IP address (1 host up) scanned in 5.52 seconds Which of the following ports should the penetration tester sniff the traffic on to obtain sensitive information?

Question

While performing reconnaissance, a penetration tester runs Nmap and receives the following output:

Nmap scan report for samplescan.org (44.33.55.66) Host is up (0.025s latency). Not shown: 992 closed tcp ports (conn-refused) PORT STATE 22/tcp open 23/tcp open 80/tcp open 443/tcp open Nmap done: 1 IP address (1 host up) scanned in 5.52 seconds Which of the following ports should the penetration tester sniff the traffic on to obtain sensitive information?

Accepted Answer

B. 23 Port 23 is used by Telnet, which transmits data, including authentication credentials, in plaintext. Sniffing traffic on this port allows an attacker to capture sensitive information directly from the network without decryption.

Answer

A. 22 Port 22 is used by SSH, which encrypts all traffic, making it secure against passive sniffing for sensitive data.

Answer

C. 80 Port 80 is used by HTTP, which transmits data in plaintext, but sensitive information is more commonly found on unencrypted management protocols like Telnet.

Answer

D. 443 Port 443 is used by HTTPS, which encrypts all traffic using SSL/TLS, making it secure against passive sniffing for sensitive data.

While performing reconnaissance, a penetration tester runs Nmap and receives the following output: Nmap scan report for samplescan.org (44.33.55.66) Host is up (0.025s latency). Not shown: 992…

Question

Options

How the community answered

Why each option

Topics

Community Discussion