nerdexam
CompTIA

SY0-501 · Question #484

A remote intruder wants to take inventory of a network so exploits can be researched. The intruder is looking for information about software versions on the network. Which of the following techniques

The correct answer is A. Banner grabbing. Banner grabbing is a reconnaissance technique used by attackers to collect software version and service information from network hosts by reading the banners returned by services upon connection.

Submitted by haruto_sh· Mar 4, 2026Threats, vulnerabilities, and mitigations

Question

A remote intruder wants to take inventory of a network so exploits can be researched. The intruder is looking for information about software versions on the network. Which of the following techniques is the intruder using?

Options

  • ABanner grabbing
  • BPort scanning
  • CPacket sniffing
  • DVirus scanning

How the community answered

(31 responses)
  • A
    74% (23)
  • B
    16% (5)
  • C
    6% (2)
  • D
    3% (1)

Why each option

Banner grabbing is a reconnaissance technique used by attackers to collect software version and service information from network hosts by reading the banners returned by services upon connection.

ABanner grabbingCorrect

Banner grabbing involves connecting to a network service (such as FTP, HTTP, SSH, or SMTP) and reading the response header or banner that the service sends back, which often contains the software name, version, and operating system details. This information allows attackers to identify vulnerable software versions and research applicable exploits. It is a passive-to-active reconnaissance method specifically aimed at enumerating software and service information.

BPort scanning

Port scanning identifies which ports are open on a host to determine what services are running, but does not inherently reveal software version information from service banners.

CPacket sniffing

Packet sniffing captures network traffic in transit to analyze data, credentials, or communications, and is not specifically targeted at collecting software version information from services.

DVirus scanning

Virus scanning is a defensive technique used to detect malware on a system and is not a reconnaissance method used by attackers to gather network inventory information.

Concept tested: Banner grabbing for software version reconnaissance

Source: https://attack.mitre.org/techniques/T1592/

Topics

#banner grabbing#reconnaissance#enumeration#network scanning

Community Discussion

No community discussion yet for this question.

Full SY0-501 Practice