CompTIA Security+ (SY0-601) — Question 171

A security administrator suspects there may be unnecessary services running on a server. Which of the following tools will the administrator MOST likely use to confirm the suspicions?

Answer options

• A. Nmap
• B. Wireshark
• C. Autopsy
• D. DNSEnum

Correct answer: A

Explanation

Nmap is a powerful network scanning tool that can identify open ports and services running on a server, making it the most appropriate choice for confirming the presence of unnecessary services. Wireshark is primarily used for network traffic analysis, while Autopsy is a digital forensics tool and DNSEnum is focused on DNS enumeration, neither of which are meant for assessing running services.