Question 124 of 160 from exam CS0-002: CompTIA CySA+

Question 124 of 160 from exam CS0-002: CompTIA CySA+

Question

Given the Nmap request below:

Scanner# nmap -p 22,113, 139,1433 www.scannable.org - d --packet-trace
Starting Nmap (http: //nmap.org)

Nmap scan report for www.scannable.org

SENT(0.0149s) ICMP SCANNER > SCANNABLE

echo request (type=8/code
SENT(0.0112s) TCP SCANNER: 63541 > SCANNABLE:80 iplen=40 seq=99850910

RCVC(0.0179s) ICMP SCANNABLE > SCANNER echo reply(type-0/code=0 iplen=28 seq=99850910
we got a ping back for SCANNABLE: ID=48822 seq=713 checksum=16000

massping done: num_host:1 num_response:1

Initiating SYN STEALTH Scan against www.scannable.org (SCANNABLE) 3 ports at 00:47
SENT (0.01345) TCP SCANNER:63517 > SCANNABLE:113 iplen=40 seq=1048634

SENT(0.0148s) TCP SCANNER: 63517 > SCANNABLE:139 iplen=40 seq=1048634

SENT (0.0092s) TCP SCANNER:63517 > SCANNABLE:22 iplen=40 seq=1048634

RCVD(0.0151s) TCP SCANNABLE:113 > SCANNER: 63517 iplen=40 seq=1048634

RCVD(0.0151s) TCP SCANNABLE:22 > SCANNER:63517 iplen=40 seq=1048634

SENT (0.0097s) TCP SCANNER: 63517 > SCANNABLE:139 iplen=40 seq=1048634

The SYN STEALTH Scan took 1.25s to scan 3 total ports

Nmap Report for www.scannable.org (SCANNABLE)

PORT STATE SERVICE
22/tep open ssh
113/tep closed auth
139/tep filtered  netbios-ssh
1433/tcp _— closed ms-sql

Nmap done:1 10.155.187.1 (1 host)

Which of the following actions will an attacker be able to initiate directly against this host?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

C.