CompTIA Security+ (SY0-601) — Question 82

While investigating a recent security incident, a security analyst decides to view all network connections on a particular server. Which of the following would provide the desired information?

Answer options

• A. arp
• B. nslookup
• C. netstat
• D. nmap

Correct answer: C

Explanation

The correct answer is C, netstat, as it displays active network connections and listening ports on the server. Option A, arp, is used for viewing the Address Resolution Protocol cache, while B, nslookup, is for querying DNS records. Option D, nmap, is a network scanning tool, not specifically for viewing connections.