The results of an Nmap scan are as follows: Which of the following would be the BEST conclusion about this device?

The correct answer is B. This device is most likely a gateway with in-band management services. The Nmap scan shows TCP/22 (SSH) and TCP/443 (HTTPS) open. This combination is characteristic of a network gateway or edge device that exposes in-band management services: SSH for CLI administration and HTTPS for a web management interface. Option A incorrectly associates…

Information Gathering and Vulnerability Scanning

Question

The results of an Nmap scan are as follows:

Which of the following would be the BEST conclusion about this device?

Exhibit

Options

AThis device may be vulnerable to the Heartbleed bug due to the way transactions over TCP/22
BThis device is most likely a gateway with in-band management services.
CThis device is most likely a proxy server forwarding requests over TCP/443.
DThis device may be vulnerable to remote code execution because of a butter overflow

How the community answered

(41 responses)

A
5% (2)
B
71% (29)
C
7% (3)
D
17% (7)

Explanation

The Nmap scan shows TCP/22 (SSH) and TCP/443 (HTTPS) open. This combination is characteristic of a network gateway or edge device that exposes in-band management services: SSH for CLI administration and HTTPS for a web management interface. Option A incorrectly associates Heartbleed (an OpenSSL vulnerability) with TCP/22 (SSH), not TCP/443. Option C would require evidence of proxy-specific behavior. Option D references a buffer overflow with no supporting scan evidence. A device with only a management SSH port and HTTPS port is most consistent with a gateway.

Topics

#Nmap#Network Scanning#Service Identification#Device Role Identification

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice