A penetration tester obtains the following output during an Nmap scan: Which of the following should be the next step for the tester?

The correct answer is B. Enumerate shares and search for vulnerabilities on the SMB service.. Port 445/tcp is open and associated with SMB (Server Message Block), commonly used for file and printer sharing. Enumerating SMB shares can reveal sensitive files, misconfigurations, or exploitable vulnerabilities.

Submitted by saadiq_pk· Mar 6, 2026Reconnaissance and Enumeration

Question

A penetration tester obtains the following output during an Nmap scan:

Which of the following should be the next step for the tester?

Exhibit

Options

ASearch for vulnerabilities on msrpc.
BEnumerate shares and search for vulnerabilities on the SMB service.
CExecute a brute-force attack against the Remote Desktop Services.
DExecute a new Nmap command to search for another port.

How the community answered

(55 responses)

A
5% (3)
B
73% (40)
C
18% (10)
D
4% (2)

Explanation

Port 445/tcp is open and associated with SMB (Server Message Block), commonly used for file and printer sharing. Enumerating SMB shares can reveal sensitive files, misconfigurations, or exploitable vulnerabilities.

Topics

#Nmap#SMB enumeration#vulnerability scanning#network reconnaissance

Community Discussion

No community discussion yet for this question.

Full PT0-003 Practice