CompTIA Security+ (SY0-501) — Question 993

A security administrator suspects there may be unnecessary services running on a server. Which of the following tools will the administrator MOST likely use to confirm the suspicions?

Answer options

• A. Nmap
• B. Wireshark
• C. Autopsy
• D. DNSEnum

Correct answer: A

Explanation

Nmap is a powerful network scanning tool that can identify open ports and running services on a server, making it the best choice for confirming unnecessary services. Wireshark is primarily used for network traffic analysis, Autopsy is a digital forensics tool, and DNSEnum is focused on DNS enumeration, none of which are specifically designed for checking service status.