Exam CS0-003 Topic 3 Question 132 Discussion
Actual exam question for CompTIA's CS0-003 exam
Question #: 132
Topic #: 3
Question #: 132
Topic #: 3
After an upgrade to a new EDR, a security analyst received reports that several endpoints were not communicating with the SaaS provider to receive critical threat signatures. To comply with the incident response playbook, the security analyst was required to validate connectivity to ensure communications. The security analyst ran a command that provided the following output:
ComputerName: comptia007
RemotePort: 443
InterfaceAlias: Ethernet 3
TcpTestSucceeded: False
Which of the following did the analyst use to ensure connectivity?
ComputerName: comptia007
RemotePort: 443
InterfaceAlias: Ethernet 3
TcpTestSucceeded: False
Which of the following did the analyst use to ensure connectivity?
Suggested Answer: B Vote an answer
Comprehensive Detailed
The command output shown indicates that the analyst used a TCP connection test to check if communication on port 443 (usually HTTPS) succeeded. Here's why each option was or was not suitable:
A . nmap: While nmap can scan ports, it does not provide direct feedback on connection success or failure in the manner shown.
B . tnc (Test-NetConnection in PowerShell): This command in PowerShell is specifically designed to test connectivity to a specified port and IP address. The output (TcpTestSucceeded: False) is characteristic of the tnc command.
C . ping: The ping command only tests ICMP echo replies and does not indicate success or failure on specific ports.
D . tracert: tracert traces the path packets take to reach a host but does not provide a direct indication of port availability or success.
Reference:
Microsoft PowerShell Documentation: Test-NetConnection cmdlet, which details TCP port testing.
NIST SP 800-115: Technical Guide to Information Security Testing and Assessment, covering connectivity testing methods.
The command output shown indicates that the analyst used a TCP connection test to check if communication on port 443 (usually HTTPS) succeeded. Here's why each option was or was not suitable:
A . nmap: While nmap can scan ports, it does not provide direct feedback on connection success or failure in the manner shown.
B . tnc (Test-NetConnection in PowerShell): This command in PowerShell is specifically designed to test connectivity to a specified port and IP address. The output (TcpTestSucceeded: False) is characteristic of the tnc command.
C . ping: The ping command only tests ICMP echo replies and does not indicate success or failure on specific ports.
D . tracert: tracert traces the path packets take to reach a host but does not provide a direct indication of port availability or success.
Reference:
Microsoft PowerShell Documentation: Test-NetConnection cmdlet, which details TCP port testing.
NIST SP 800-115: Technical Guide to Information Security Testing and Assessment, covering connectivity testing methods.
by William at Mar 10, 2025, 06:56 AM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).