Discuss CompTIA CS0-003 Exam Topic 6 Question 2

Given the output below:

#nmap 7.70 scan initiated Tues, Feb 8 12:34:56 2022 as: nmap -v -Pn -p 80,8000,443 --script http-* -oA server.out 192.168.220.42 Which of the following is being performed?

ACross-site scripting

BLocal file inclusion attack

CLog4] check

DWeb server enumeration

Suggested Answer: D

Web server enumeration is the process of identifying information about a web server, such as its software version, operating system, configuration, services, and vulnerabilities. This can be done using tools like Nmap, which can scan ports and run scripts to gather information. In this question, the Nmap command is using the -p option to scan ports 80, 8000, and 443, which are commonly used for web services. It is also using the --script option to run scripts that start with http-*, which are related to web server enumeration. The output file name server.out also suggests that the purpose of the scan is to enumerate web servers. Reference: CompTIA Cybersecurity Analyst (CySA+) Certification Exam Objectives (CS0-002), page 8; https://partners.comptia.org/docs/default-source/resources/comptia-cysa-cs0-002-exam-objectives

Get Premium CS0-003 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Mertie 11 months ago

I thought it was for cross-site scripting at first.

Karima 11 months ago

Definitely not a local file inclusion attack.

Golda 11 months ago

Wait, is that really what it is?

Cathrine 11 months ago

Totally agree, that's what it seems like!

Oretha 12 months ago

Looks like a web server enumeration scan.

Robt 12 months ago

I feel like this could be related to cross-site scripting, but the focus on ports and scripts seems more aligned with enumeration.

Peggie 12 months ago

The use of the `http-*` script makes me lean towards web server enumeration, but I could be mixing it up with something else we practiced.

Pamella 1 year ago

I'm not entirely sure, but I remember something about local file inclusion attacks being related to specific vulnerabilities in web servers.

Rosina 1 year ago

I think this is about web server enumeration since it mentions scanning specific ports and using HTTP scripts.

Sang 1 year ago

Hmm, I'm a bit unsure about this one. I'm considering either option A or B, but I'm not entirely confident in my decision. I'll need to think it through a bit more.

Berry 1 year ago

Hmm, I'm a bit unsure about this. I'll need to review my notes on data anonymization and pseudonymization.

Willow 1 year ago

This is a tricky one, but I think I can tackle it. I'll need to carefully calculate the tax amounts for each income level and make sure the test inputs cover the key boundaries.

CompTIA CS0-003 Exam - Topic 6 Question 2 Discussion