ITPEC FE Morning October 2020 Question 43

Port Scanner Purpose — identify unnecessary services running on a server.

A port scanner checks which ports are open (listening) on a target host, revealing active services.

During a security inspection of a web server, the purpose is:
- Enumerate all running services by scanning open ports
- Identify and shut down unnecessary services to reduce the attack surface

Why not others:
- (a) — describes manual content inspection via login, unrelated to port scanning
- (b) — describes access log analysis, not port enumeration
- (d) — describes user ID management audit, not network service discovery

Key rule: Port scanner = "what services are running?" → minimize attack surface by disabling unneeded ones.

AI-generated — may contain errors