Hotspot Question A security analyst is asked to perform various techniques to assess organizational security. INSTRUCTIONS Select the command that will successfully accomplish each objective…

Question

Exhibits

Answer Area

• Network reconnaissancenmap -A 192.168.50.0/32
  Selectnetstat -anchown administrator file.txticacls "..\files"dd if = /dev/sda of = /dev/sdb conv=noerror, syncchmod u=rw, go-r file.txttcpdump -l eth1 -l -n | tee ping-scan.txtnmap -A 192.168.50.0/32find / -name ".htaccess"ping 203.11.14.32 -t
• Folder inheritanceicacls "..\files"
  Selectnetstat -anchown administrator file.txticacls "..\files"dd if = /dev/sda of = /dev/sdb conv=noerror, syncchmod u=rw, go-r file.txttcpdump -l eth1 -l -n | tee ping-scan.txtnmap -A 192.168.50.0/32find / -name ".htaccess"ping 203.11.14.32 -t
• Searching file systemfind / -name ".htaccess"
  Selectnetstat -anchown administrator file.txticacls "..\files"dd if = /dev/sda of = /dev/sdb conv=noerror, syncchmod u=rw, go-r file.txttcpdump -l eth1 -l -n | tee ping-scan.txtnmap -A 192.168.50.0/32find / -name ".htaccess"ping 203.11.14.32 -t
• Confirm connectivityping 203.11.14.32 -t
  Selectnetstat -anchown administrator file.txticacls "..\files"dd if = /dev/sda of = /dev/sdb conv=noerror, syncchmod u=rw, go-r file.txttcpdump -l eth1 -l -n | tee ping-scan.txtnmap -A 192.168.50.0/32find / -name ".htaccess"ping 203.11.14.32 -t
• Enumerate listenersnetstat -an
  Selectnetstat -anchown administrator file.txticacls "..\files"dd if = /dev/sda of = /dev/sdb conv=noerror, syncchmod u=rw, go-r file.txttcpdump -l eth1 -l -n | tee ping-scan.txtnmap -A 192.168.50.0/32find / -name ".htaccess"ping 203.11.14.32 -t

Explanation

This hotspot question tests a security analyst's ability to match specific security assessment commands to their correct objectives, such as network scanning, vulnerability assessment, password cracking, traffic capture, and exploitation tasks.

Approach. The correct approach requires matching each security objective to the appropriate command-line tool: Nmap is used for network/port scanning and host discovery; Nessus or OpenVAS commands are used for vulnerability scanning; Hashcat or John the Ripper are used for password cracking offline; tcpdump or Wireshark (tshark) are used for packet capture and traffic analysis; Metasploit (msfconsole) is used for exploitation and post-exploitation activities; and tools like Nikto are used for web application scanning. Each command is unique to its function and can only be assigned once, requiring the analyst to understand the distinct purpose of each tool in the penetration testing and security assessment lifecycle.

Concept tested. Security assessment tool identification and command mapping - specifically, understanding the purpose and syntax of common penetration testing and security analysis tools including Nmap, Metasploit, Hashcat/John the Ripper, tcpdump/Wireshark, Nikto, and vulnerability scanners, and correctly associating each with its intended security objective.

Reference. CompTIA Security+ SY0-701 Domain 4: Security Operations - Objective 4.3: Given a scenario, use the appropriate tool to assess organizational security; also aligned with CompTIA PenTest+ PT0-002 tool usage objectives.

No community discussion yet for this question.