M03 · Scanning Networks · Q&A

Check understanding with original scenarios and a reason for every option. These answers do not establish exam or practical readiness.

Scenario questions

ceh-m03-port-q1 · Original practice

What does 443/tcp open directly support?

What does 443/tcp open directly support? A. The website has no vulnerabilitiesB. This probe observed a service accepting connectionsC. Administrator access was obtainedD. TLS identity verification passed

Confidence

JavaScript is off: read the answer and explanation

Security has not been established.
This matches the state’s observational meaning.
An open port provides no evidence of privilege.
A port state is not a certificate-validation result.

ceh-m03-port-q2 · Original practice

How should open|filtered be recorded?

How should open|filtered be recorded? A. Record open onlyB. Record closed onlyC. Preserve both possibilities and probe conditionsD. Rewrite it as compromised

Confidence

JavaScript is off: read the answer and explanation

Dropping filtered falsely removes uncertainty.
The result does not support closed.
Preserving uncertainty matches the output.
The state is not compromise evidence.

ceh-m03-port-q3 · Original practice

What should be retained when comparing scans?

What should be retained when comparing scans? A. Time, vantage point, protocol and methodB. Only the tool iconC. Only the highest port numberD. Treat every method as identical

Confidence

JavaScript is off: read the answer and explanation

These conditions affect observable responses.
An icon cannot reconstruct the probe.
A port number does not capture the observation conditions.
Different methods can change interpretation.

Continue to safe practice →

CS Kairos Research and learning, built over time.

Teaching & main site Content principles GitHub