Perform Reconnaissance

Lab Assessment Questions & Answers

1. Name at least five applications and tools pre-loaded on the TargetWindows01 server desktop, and identify whether that application starts as a service on the system or must be run manually.
Windows Application Loaded Starts as Service Y/N
1. Filezilla, Yes
2. Wireshark, Yes
3. Firefox, No
4. Internet Explorer, No
5. Nessus Client, No

2. What was the allocated source IP host address for the TargetWindows01 server, LAN Switch 1, LAN Switch 2, and the IP default gateway router?

 TargetWindows01 Server – 172.30.0.8
 LAN Switch 1 – 172.16.8.5
 LAN Switch 2 Server – 172.16.20.5
 Default Gateway Router – 172.30.0.1

3. Did the targeted IP hosts respond to the ICMP echo-request packet with an ICMP echo-reply packet when you initiated the “ping” command at your DOS prompt? If yes, how many ICMP echo-request packets were sent back to the IP source?

Yes, there was a response of 4 packets.

4. What is the command line syntax for running an “Intense Scan” with Zenmap on a target subnet of 172.30.0.0/24?

nmap -T4 -A -v -PE -PS22,25,80 -PA21,23,80,3389 173.30.0.0/24

5. Name at least five different scans that may be performed from the Zenmap GUI. Document under what circumstances you would choose to run those particular scans.

 Quick Scan – Fast network scan.
 Regular Scan – Basic network scan.
 Intense Scan – Slower, more thorough scan.
 Ping Scan – Scans for working pings
 Quick Traceroute – Scans router hops

6. How many different tests (i.e., scripts) did your “Intense Scan” definition perform? List them all after reviewing the scan report.

36 scans total

7. Describe what each of these tests or scripts performs within the Zenmap GUI (Nmap) scan report.

8. How many total IP hosts (not counting Cisco device interfaces) did Zenmap GUI (Nmap) find on the network?

256

9. Based on your Nmap scan results and initial reconnaissance and probing, what next steps would you perform on