SY0-501 · Question #153
An auditor wants to test the security posture of an organization by running a tool that will display the following: Which of the following commands should be used?
The correct answer is A. nbtstat. An auditor testing security posture to display NetBIOS over TCP/IP (NetBT) protocol statistics or name tables should use the nbtstat command.
Question
An auditor wants to test the security posture of an organization by running a tool that will display the following:
Which of the following commands should be used?
Options
- Anbtstat
- Bnc
- Carp
- Dipconfig
How the community answered
(24 responses)- A71% (17)
- B8% (2)
- C17% (4)
- D4% (1)
Why each option
An auditor testing security posture to display NetBIOS over TCP/IP (NetBT) protocol statistics or name tables should use the `nbtstat` command.
The `nbtstat` command is specifically used to display NetBIOS over TCP/IP (NetBT) protocol statistics, NetBIOS name tables for local and remote computers, and the NetBIOS name cache. An auditor would use this to identify active NetBIOS names, services, and potential shares on a network, which can indicate security vulnerabilities or misconfigurations related to legacy naming services.
`nc` (netcat) is a versatile utility used for reading from and writing to network connections, often for port scanning or banner grabbing, but not specifically for displaying NetBIOS statistics or name tables.
`arp` displays and modifies the IP-to-Physical address translation tables, showing MAC addresses mapped to IP addresses on the local segment, which is unrelated to NetBIOS information.
`ipconfig` displays current TCP/IP network configuration values for network adapters, such as IP addresses, subnet masks, and default gateways, but does not show NetBIOS information.
Concept tested: NetBIOS over TCP/IP (NetBT) command-line utility
Source: https://learn.microsoft.com/windows-server/administration/windows-commands/nbtstat
Topics
Community Discussion
No community discussion yet for this question.