IT0202 COMPREHENSIVE TEST BANK MIDTERM EXAM
2026-2027 NEWEST VERSION WITH COMPLETE
QUESTIONS AND CORRECT ANSWERS\VERIFIED 100%
|| ALREADY GRADED A+ BRAND NEW!!
What is the disadvantage of conducting an unauthenticated scan of a
target when performing a penetration test?
Vulnerability of services running inside the target may not be detected.
The scanner will report the port as open whether or not the service on
that network segment is listening or not.
Unauthenticated scans are more likely to provide a lower rate of false
positives than authenticated scans.
Unauthenticated scans are a form of passive reconnaissance that return
little useful information.
ANSWERS: Vulnerability of services running inside the target may not be
detected.
,What is required for a penetration tester to conduct a comprehensive
authenticated scan against a Linux host?
User credentials with root-level access to the target system
System user credentials
Physical on-premises access to the target system
Unauthenticated scans are a form of passive reconnaissance that return
little useful information.
Backdoor access to the target system
ANSWERS: User credentials with root-level access to the target system
In which circumstance would a penetration tester perform an
unauthenticated scan of a target?
When user credentials were not provided
When the number of false positive vulnerability reports is not required
When time is limited and faster scans are required
When only targets with UDP services are to be scanned
ANSWERS: When user credentials were not provided
,Why would a penetration tester use the nmap -sF command?
When a TCP SYN scan is detected by a network filter or firewall
When the tester wants to conclude the scan
When a TCP SYN scan reports more than one open port
When the tester needs to time stamp the scan
ANSWERS: When a TCP SYN scan is detected by a network filter or firewall
What is the purpose of host enumeration when beginning a penetration
test?
To identify all active IP addresses within the scope of the test
To count the total number of IP addresses within the scope of the test
To identify all vulnerable hosts within the scope of the test
To count the total number of vulnerable hosts within the scope of the
test
ANSWERS: To identify all active IP addresses within the scope of the test
, What can be deduced when a tester enters the nmap -sF command to
perform a TCP FIN scan and the target host port does not respond?
That the port is not responding to TCP traffic
That the port is listening for UDP traffic
That the port is open
That the port is not ready to close the TCP connection
ANSWERS: That the port is open
What is the disadvantage of running a TCP Connect scan compared to
running a TCP SYN scan during a penetration test?
Both open and closed ports are detected.
Indeterminate ICMP messages are generated.
Hosts and addresses outside the scope of the test may be scanned.
The extra packets required may trigger an IDS alarm.
ANSWERS: The extra packets required may trigger an IDS alarm.
2026-2027 NEWEST VERSION WITH COMPLETE
QUESTIONS AND CORRECT ANSWERS\VERIFIED 100%
|| ALREADY GRADED A+ BRAND NEW!!
What is the disadvantage of conducting an unauthenticated scan of a
target when performing a penetration test?
Vulnerability of services running inside the target may not be detected.
The scanner will report the port as open whether or not the service on
that network segment is listening or not.
Unauthenticated scans are more likely to provide a lower rate of false
positives than authenticated scans.
Unauthenticated scans are a form of passive reconnaissance that return
little useful information.
ANSWERS: Vulnerability of services running inside the target may not be
detected.
,What is required for a penetration tester to conduct a comprehensive
authenticated scan against a Linux host?
User credentials with root-level access to the target system
System user credentials
Physical on-premises access to the target system
Unauthenticated scans are a form of passive reconnaissance that return
little useful information.
Backdoor access to the target system
ANSWERS: User credentials with root-level access to the target system
In which circumstance would a penetration tester perform an
unauthenticated scan of a target?
When user credentials were not provided
When the number of false positive vulnerability reports is not required
When time is limited and faster scans are required
When only targets with UDP services are to be scanned
ANSWERS: When user credentials were not provided
,Why would a penetration tester use the nmap -sF command?
When a TCP SYN scan is detected by a network filter or firewall
When the tester wants to conclude the scan
When a TCP SYN scan reports more than one open port
When the tester needs to time stamp the scan
ANSWERS: When a TCP SYN scan is detected by a network filter or firewall
What is the purpose of host enumeration when beginning a penetration
test?
To identify all active IP addresses within the scope of the test
To count the total number of IP addresses within the scope of the test
To identify all vulnerable hosts within the scope of the test
To count the total number of vulnerable hosts within the scope of the
test
ANSWERS: To identify all active IP addresses within the scope of the test
, What can be deduced when a tester enters the nmap -sF command to
perform a TCP FIN scan and the target host port does not respond?
That the port is not responding to TCP traffic
That the port is listening for UDP traffic
That the port is open
That the port is not ready to close the TCP connection
ANSWERS: That the port is open
What is the disadvantage of running a TCP Connect scan compared to
running a TCP SYN scan during a penetration test?
Both open and closed ports are detected.
Indeterminate ICMP messages are generated.
Hosts and addresses outside the scope of the test may be scanned.
The extra packets required may trigger an IDS alarm.
ANSWERS: The extra packets required may trigger an IDS alarm.
