312-50

312-50 practice questions, page 23 of 25, with answer review and explanations.

Question 111

Which NMAP command combination would let a tester scan every TCP port from a class C network that is blocking ICMP with fingerprinting and service detection?

  1. NMAP -PN -A -O -sS 192.168.2.0/24
  2. NMAP -P0 -A -O -p1-65535 192.168.0/24
  3. NMAP -P0 -A -sT -p0-65535 192.168.0/16
  4. NMAP -PN -O -sS -p 1-1024 192.168.0/8

Question 112

While checking the settings on the internet browser, a technician finds that the proxy server settings have been checked and a computer is trying to use itself as a proxy server. What specific octet within the subnet does the technician see?

  1. 10.10.10.10
  2. 127.0.0.1
  3. 192.168.1.1
  4. 192.168.168.168

Question 113

A company has five different subnets: 192.168.1.0, 192.168.2.0, 192.168.3.0, 192.168.4.0 and 192.168.5.0. How can NMAP be used to scan these adjacent Class C networks?

  1. NMAP -P 192.168.1-5.
  2. NMAP -P 192.168.0.0/16
  3. NMAP -P 192.168.1.0,2.0,3.0,4.0,5.0
  4. NMAP -P 192.168.1/17

Question 114

A penetration tester is attempting to scan an internal corporate network from the internet without alerting the border sensor. Which is the most efficient technique should the tester consider using?

  1. Spoofing an IP address
  2. Tunneling scan over SSH
  3. Tunneling over high port numbers
  4. Scanning using fragmented IP packets

Question 115

A hacker is attempting to see which ports have been left open on a network. Which NMAP switch would the hacker use?

  1. -sO
  2. -sP
  3. -sS
  4. -sU