Câu 30: PT0-002: CompTIA PenTest+ Certification Exam

A penetration tester is looking for a vulnerability that enables attackers to open doors via a specialized TCP service that is used for a physical access control system. The service exists on more than 100 different hosts, so the tester would like to automate the assessment. Identification requires the penetration tester to: ✑ Have a full TCP connection ✑ Send a `hello` payload ✑ Wait for a response ✑ Send a string of characters longer than 16 bytesWhich of the following approaches would BEST support the objective?

1. A. Run nmap -Pn -sV --script vuln .
2. B. Employ an OpenVAS simple scan against the TCP port of the host.
3. C. Create a script in the Lua language and use it with NSE. — đáp án hiện tại
4. D. Perform a credentialed scan with Nessus.