GIAC Certified Incident Handler (GCIH) — Question 84

Which of the following is the best method of accurately identifying the services running on a victim host?

Answer options

• A. Use of the manual method of telnet to each of the open ports.
• B. Use of a port scanner to scan each port to confirm the services running.
• C. Use of hit and trial method to guess the services and ports of the victim host.
• D. Use of a vulnerability scanner to try to probe each port to verify which service is running.

Correct answer: A

Explanation

The correct answer is A, as using telnet allows for direct interaction with the service on each port, providing precise information. Options B and D involve scanning methods that may not accurately identify services, while C is unreliable and based on guessing.