A security engineer is working to identify all email servers on a network. Which of the following commands should the engineer use to identify the servers as well as the software version the servers…

The correct answer is A. nmap 10.0.0.1/24 -sT -sV -p 25,110,143,465,993,995. Option A is correct because it scans the standard email protocol ports and includes version detection. The ports targeted - 25 (SMTP), 110 (POP3), 143 (IMAP), 465 (SMTPS), 993 (IMAPS), and 995 (POP3S) - are all email-related. The -sT flag performs a full TCP connect scan, and…

Information Gathering and Vulnerability Scanning

Question

A security engineer is working to identify all email servers on a network. Which of the following commands should the engineer use to identify the servers as well as the software version the servers are running?

Options

Anmap 10.0.0.1/24 -sT -sV -p 25,110,143,465,993,995
Bnmap 10.0.0.1/24 -sT -v -p 21,22,23,53,110,135
Cnmap 10.0.0.1/24 -sS -sV -p 37,110,119,161,445,3389
Dnmap 10.0.0.1/24 -sA -sU -p 80,110,443,209,389,464

How the community answered

(51 responses)

A
75% (38)
B
4% (2)
C
8% (4)
D
14% (7)

Explanation

Option A is correct because it scans the standard email protocol ports and includes version detection. The ports targeted - 25 (SMTP), 110 (POP3), 143 (IMAP), 465 (SMTPS), 993 (IMAPS), and 995 (POP3S) - are all email-related. The -sT flag performs a full TCP connect scan, and crucially, -sV enables service/version detection, which reveals the software and version running on each open port. Option B uses non-email ports (21=FTP, 22=SSH, 23=Telnet) and lacks -sV. Option C targets ports like 161 (SNMP) and 445 (SMB), unrelated to email. Option D uses -sA (ACK scan, used for firewall mapping, not service discovery) and also targets wrong ports.

Topics

#nmap#Port Scanning#Service Version Detection#Email Protocols

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice