eJPT Host and Network Auditing 2 — Questions and Answers
Question 1: Which Nmap script is used to enumerate SMB shares on a Windows host?
- smb-enum-shares (Correct answer)
- smb-ls
- smb-security-mode
- smb-brute
Correct answer: smb-enum-shares
The smb-enum-shares NSE script lists available SMB shares on a target Windows system.
Question 2: What does the Nmap flag '-sV' accomplish during a scan?
- Version detection of running services (Correct answer)
- SYN stealth scan
- UDP scan only
- Vulnerability scanning
Correct answer: Version detection of running services
-sV probes open ports to determine service/version information running on the target.
Question 3: During a network audit, you discover a host responding on TCP 445. Which protocol is most likely running?
- SMB (Server Message Block) (Correct answer)
- FTP
- SNMP
- RDP
Correct answer: SMB (Server Message Block)
TCP port 445 is the standard port for SMB, used for Windows file and printer sharing.
Question 4: Which tool is commonly used to capture and analyze network packets during a host audit?
- Wireshark (Correct answer)
- Metasploit
- Nikto
- Hydra
Correct answer: Wireshark
Wireshark is a network protocol analyzer used to capture and inspect live or recorded network traffic.
Question 5: What Nmap command would scan all 65535 TCP ports on a target?
- nmap -p- <target> (Correct answer)
- nmap -p 65535 <target>
- nmap -A <target>
- nmap -sU <target>
Correct answer: nmap -p- <target>
The -p- flag tells Nmap to scan all 65535 TCP ports instead of just the default top 1000.
Question 6: Which command-line tool on Linux can be used to display active network connections and listening ports?
- netstat -an (Correct answer)
- ifconfig -a
- route -n
- arp -a
Correct answer: netstat -an
netstat -an displays all active connections and listening ports in numeric format.
Question 7: In host auditing, what does the term 'attack surface' refer to?
- The sum of all exposed services, ports, and interfaces that could be exploited (Correct answer)
- The geographic location of the target host
- The operating system version of the host
- The number of users on the system
Correct answer: The sum of all exposed services, ports, and interfaces that could be exploited
The attack surface encompasses all points where an attacker can try to enter or extract data from a system.
eJPT Host and Network Auditing 2
Which Nmap script is used to enumerate SMB shares on a Windows host?