Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
exam questions

Exam SEC504 All Questions

View all questions & answers for the SEC504 exam

Exam SEC504 topic 1 question 52 discussion

Actual exam question from SANS's SEC504
Question #: 52
Topic #: 1
[All SEC504 Questions]

You work as a Network Administrator for InformSec Inc. You find that the TCP port number 23476 is open on your server. You suspect that there may be a Trojan named Donald Dick installed on your server. Now you want to verify whether Donald Dick is installed on it or not. For this, you want to know the process running on port 23476, as well as the process id, process name, and the path of the process on your server. Which of the following applications will you most likely use to accomplish the task?

  • A. Tripwire
  • B. SubSeven
  • C. Netstat
  • D. Fport
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
3c69fca
4 months, 2 weeks ago
netstat -naob will not give the path of the process, only process name and process ID
upvoted 1 times
...
anonyuser
10 months ago
fport is capable?? but netstat is more common? difficult to say which they want?
upvoted 1 times
...
Shain451
3 years, 1 month ago
Why do not we choose netstat - naob it will give the same
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...