ExamTopics Logo
Mail Us[email protected]
Menu
Eccouncil Discussions
exam questions

Exam 312-50 All Questions

View all questions & answers for the 312-50 exam
Go to Exam

Exam 312-50 topic 2 question 5 discussion

Actual exam question from ECCouncil's 312-50
Question #: 5
Topic #: 2
[All 312-50 Questions]

A penetration tester is conducting a port scan on a specific host. The tester found several ports opened that were confusing in concluding the Operating System
(OS) version installed. Considering the NMAP result below, which of the following is likely to be installed on the target machine by the OS?

  • A. The host is likely a Windows machine.
  • B. The host is likely a Linux machine.
  • C. The host is likely a router.
  • D. The host is likely a printer.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
by Halibay at Oct. 13, 2020, 9:54 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Halibay
Highly Voted 4 years, 9 months ago
Printer is the answer : result from nmap of a printer -- 515/tcp open printer 631/tcp open ipp 9100/tcp open jetdirect
upvoted 8 times
...
Booict
Most Recent 6 months, 1 week ago
Selected Answer: B
B - Linux systems often have a variety of services running on different ports, which can make it challenging to determine the exact OS version based on open ports alone
upvoted 1 times
...
smsoc
9 months, 2 weeks ago
Selected Answer: A
Port 139 (netbios-ssn): This port is commonly used by Windows machines for NetBIOS over TCP/IP (NBT) communication.
upvoted 1 times
...
bic3p
12 months ago
Selected Answer: A
Port 139 (netbios-ssn): This port is commonly used by Windows machines for NetBIOS over TCP/IP (NBT) communication. Port 445 (not shown): Although not explicitly shown in the results, it's likely that port 445 is also open, as it's often used together with port 139 for SMB (Server Message Block) communication in Windows environments. MAC Address: The MAC address (00:00:48:0D:EE:89) is within the range assigned to Microsoft Corporation, which further suggests that the host is a Windows machine. While it's possible for other operating systems or devices to have these ports open, the combination of these factors makes it most likely that the target machine is running a Windows operating system. (hackergpt)
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel