Open Ports Vulnerability Assessment Quiz

1. Which scanning method sends packets with no flags set to identify open ports?

SYN scan

ACK scan

NULL scan

UDP scan

Submit

3. Which tool is commonly used to perform network enumeration and identify open ports on target systems?

Wireshark

Nmap

Metasploit

Burp Suite

4. UDP port scanning is less reliable than TCP scanning because UDP is a connectionless protocol. True or False?

True

False

Submit

6. Port 3389 is typically used by which remote access protocol?

SSH

Telnet

RDP

VNC

7. What information should be gathered during reconnaissance before conducting a vulnerability scan?

Only IP addresses

IP ranges, open ports, and running services

Employee names only

Physical server locations

8. Which port is used by the Domain Name System (DNS) service?

Port 21

Port 53

Port 110

Port 123

9. A ping sweep is performed before port scanning to identify active hosts on the network. True or False?

True

False

10. Port 25 is commonly used for which email protocol?

POP3

IMAP

SMTP

SMTPS

11. Which TCP port is typically used by HTTP services and should be monitored during vulnerability scans?

Port 80

Port 443

Port 8080

Port 3306

12. What is the port range for well-known ports as defined by IANA?

0-255

0-1023

1024-49151

49152-65535

13. Port 3306 is typically associated with which database service?

PostgreSQL

MySQL

Oracle

SQL Server

14. Which of the following port states indicates a firewall is actively blocking the port?

Open

Closed

Filtered

Listening

15. A vulnerability assessor should identify open ports before scanning to establish a baseline of network services. True or False?

True

False

16. Which port is used by HTTPS for secure web communication?

Port 80

Port 443

Port 8443

Port 3389

17. What does NMAP stand for in the context of network scanning?

Network Mapping

Network Mapper

Network Management Protocol

Network Monitoring Application

18. Port 22 is commonly associated with which service?

SMTP

SSH

DNS

SNMP

19. Which scanning technique sends SYN packets without completing the full three-way handshake?

Full connect scan

Half-open scan

FIN scan

Ping sweep

20. What is the primary purpose of conducting a port scan before a full vulnerability assessment?

To identify active hosts and open services

To exploit known vulnerabilities

To encrypt network traffic

To block unauthorized access

Vuln Assessor Identifying Open Ports Before a Scan Quiz

1. Which scanning method sends packets with no flags set to identify open ports?

2.

What first name or nickname would you like us to use?

2. Before scanning, a vulnerability assessor should document baseline ____ to compare against post-scan findings.

3. Which tool is commonly used to perform network enumeration and identify open ports on target systems?

4. UDP port scanning is less reliable than TCP scanning because UDP is a connectionless protocol. True or False?

5. The process of identifying open ports without attempting to connect is called a ____ scan.

6. Port 3389 is typically used by which remote access protocol?

7. What information should be gathered during reconnaissance before conducting a vulnerability scan?

8. Which port is used by the Domain Name System (DNS) service?

9. A ping sweep is performed before port scanning to identify active hosts on the network. True or False?

10. Port 25 is commonly used for which email protocol?

11. Which TCP port is typically used by HTTP services and should be monitored during vulnerability scans?

12. What is the port range for well-known ports as defined by IANA?

13. Port 3306 is typically associated with which database service?

14. Which of the following port states indicates a firewall is actively blocking the port?

15. A vulnerability assessor should identify open ports before scanning to establish a baseline of network services. True or False?

16. Which port is used by HTTPS for secure web communication?

17. What does NMAP stand for in the context of network scanning?

18. Port 22 is commonly associated with which service?

19. Which scanning technique sends SYN packets without completing the full three-way handshake?

20. What is the primary purpose of conducting a port scan before a full vulnerability assessment?