CompTIA Security+ (SY0-601) — Question 717

A security analyst wants to fingerprint a web server. Which of the following tools will the security analyst MOST likely use to accomplish this task?

Answer options

• A. nmap -pl-65535 192.168.0.10
• B. dig 192.168.0.10
• C. curl --head http://192.168.0.10
• D. ping 192.168.0.10

Correct answer: C

Explanation

The correct answer is C, as 'curl --head' is specifically designed to retrieve HTTP headers, allowing the analyst to gather information about the web server. Option A, while useful for port scanning, does not provide specific web server details. Option B, 'dig', is primarily used for DNS queries and would not directly fingerprint a web server. Option D, 'ping', only checks the reachability of a host and does not provide detailed information about the web service.