PenTest+ Network and Service Enumeration Basics

1. What is the primary advantage of UDP scanning over TCP scanning?

Faster and less likely to be logged

More reliable and accurate

Easier to execute

Provides complete port status

2. True or False: LDAP queries can reveal information about domain users and groups.

True

False

3. True or False: Nmap can perform OS fingerprinting without performing port scanning.

True

False

4. True or False: A closed port returns an RST packet in response to a TCP connect scan.

True

False

Submit

8. Which service typically runs on port 3306?

PostgreSQL

MySQL

Oracle

SQL Server

9. What does the -p option in Nmap specify?

Packet size

Port range to scan

Ping timeout

Protocol type

10. Netstat is used to enumerate which of the following?

Active network connections and listening ports

DNS records

User credentials

Firewall rules

11. Which Nmap scan type uses TCP three-way handshake completion to determine open ports?

SYN scan (-sS)

Connect scan (-sT)

FIN scan (-sF)

Idle scan (-sI)

12. Which scan type sends packets with no flags set to identify filtered ports?

SYN scan

ACK scan

NULL scan

Connect scan

13. Port 389 is associated with which directory service protocol?

Kerberos

LDAP

NTP

SNMP

14. What information can be obtained from a WHOIS lookup?

Domain registrant details and IP ownership

Active user sessions

System passwords

Firewall configurations

15. Shodan is primarily used for discovering what type of information?

Social media profiles

Internet-connected devices and services

Email addresses

Password databases

16. Which Nmap option enables OS detection and service version identification?

-sV

-O and -sV

-A

-sS

17. What does OSINT stand for in the context of reconnaissance?

Open Source Intelligence

Operational System Information Notation

Online Security Internet Navigation

Offensive System Integration Network

18. Port 445 is typically associated with which Windows service?

HTTP

SMB/CIFS

SMTP

SSH

19. Which tool is commonly used to perform zone transfers and discover DNS records?

Dig

Nslookup

Whois

Tracert

20. What is the primary purpose of DNS enumeration in reconnaissance?

To crack DNS server passwords

To identify domain names, IP addresses, and mail servers

To disable DNS services

To encrypt DNS traffic

PenTest+ Network and Service Enumeration Basics Quiz

1. What is the primary advantage of UDP scanning over TCP scanning?

2.

What first name or nickname would you like us to use?

2. True or False: LDAP queries can reveal information about domain users and groups.

3. True or False: Nmap can perform OS fingerprinting without performing port scanning.

4. True or False: A closed port returns an RST packet in response to a TCP connect scan.

5. The default SNMP community string that poses a security risk is____

6. Certificate transparency logs are useful for discovering____

7. Passive reconnaissance differs from active reconnaissance in that it____

8. Which service typically runs on port 3306?

9. What does the -p option in Nmap specify?

10. Netstat is used to enumerate which of the following?

11. Which Nmap scan type uses TCP three-way handshake completion to determine open ports?

12. Which scan type sends packets with no flags set to identify filtered ports?

13. Port 389 is associated with which directory service protocol?

14. What information can be obtained from a WHOIS lookup?

15. Shodan is primarily used for discovering what type of information?

16. Which Nmap option enables OS detection and service version identification?

17. What does OSINT stand for in the context of reconnaissance?

18. Port 445 is typically associated with which Windows service?

19. Which tool is commonly used to perform zone transfers and discover DNS records?

20. What is the primary purpose of DNS enumeration in reconnaissance?