Banner Grabbing & Service Fingerprinting Quiz

1. What does the 'Server' header in HTTP responses typically reveal?

Client IP address

Web server software and version

Database credentials

User session tokens

Submit

3. Which response characteristic does Nmap use to identify operating systems?

HTTP status codes

TCP window size and TTL values

DNS query responses

ICMP echo reply timing

4. True or False: Banner grabbing is always restricted by law and should never be performed.

True

False

Submit

6. Which Nmap option is used for OS detection during fingerprinting?

-sV

-O

-A

Both -sV and -O

7. What is the primary difference between active and passive fingerprinting?

Active sends traffic; passive observes without sending traffic

Passive requires administrator privileges

Active only works on Windows systems

Passive is illegal in most jurisdictions

8. True or False: Removing or obfuscating banners completely eliminates the risk of service fingerprinting.

True

False

Submit

10. Which port is typically associated with SMTP banner grabbing?

21

22

25

443

11. What is the primary purpose of banner grabbing in penetration testing?

To identify running services and their version numbers

To encrypt network traffic

To bypass firewall rules

To launch denial-of-service attacks

12. Which of the following is an example of a service fingerprinting tool?

Nessus

OpenVAS

Metasploit

All of the above

13. True or False: Banner grabbing is a passive reconnaissance technique that does not generate network traffic.

True

False

Submit

15. Which command-line tool can be used to grab banners from FTP servers?

Curl

Telnet

Dig

Iptables

16. What is the default SSH port used for banner grabbing?

21

22

25

3389

Submit

18. Which tool is commonly used for banner grabbing on multiple ports?

Wireshark

Nmap

Hashcat

Burp Suite

19. What information can typically be extracted from an HTTP banner?

Server software name and version only

Server software, version, OS, and modules

User credentials and passwords

Database encryption keys

20. Which protocol is most commonly used for banner grabbing on web servers?

SSH

HTTP

DNS

SNMP

PenTest+ V2 Banner Grabbing and Service Fingerprinting Quiz

1. What does the 'Server' header in HTTP responses typically reveal?

2.

What first name or nickname would you like us to use?

2. Reducing unnecessary services and ____ banners are defensive measures against fingerprinting.

3. Which response characteristic does Nmap use to identify operating systems?

4. True or False: Banner grabbing is always restricted by law and should never be performed.

5. Service version detection helps identify ____ in running applications.

6. Which Nmap option is used for OS detection during fingerprinting?

7. What is the primary difference between active and passive fingerprinting?

8. True or False: Removing or obfuscating banners completely eliminates the risk of service fingerprinting.

9. Banner grabbing from a database service helps identify ____ vulnerabilities.

10. Which port is typically associated with SMTP banner grabbing?

11. What is the primary purpose of banner grabbing in penetration testing?

12. Which of the following is an example of a service fingerprinting tool?

13. True or False: Banner grabbing is a passive reconnaissance technique that does not generate network traffic.

14. OS fingerprinting relies on analyzing ____ responses to identify operating systems.

15. Which command-line tool can be used to grab banners from FTP servers?

16. What is the default SSH port used for banner grabbing?

17. Service fingerprinting can be classified as ____ reconnaissance.

18. Which tool is commonly used for banner grabbing on multiple ports?

19. What information can typically be extracted from an HTTP banner?

20. Which protocol is most commonly used for banner grabbing on web servers?