Which tool is commonly used to discover hosts and services on a network as part of a pentest?

Which tool is commonly used to discover hosts and services on a network as part of a pentest?

• A. NMAP
• B. Nessus
• C. theHarvester
• D. Core Impact

Answer: (A)

Discovering hosts and services on a network relies on a tool that can actively probe devices, determine which hosts are reachable, identify open ports, and reveal the services and versions running on those ports. NMAP is designed for exactly this purpose. It can perform a quick ping sweep to see which hosts are up, then scan ports to find open ones and probe those services to determine what software and versions are in use. This information is foundational for planning an attack path, because it shows where to focus exploitation attempts and what techniques might work. Nessus, while valuable, is primarily a vulnerability scanner that builds on discovered hosts to assess weaknesses rather than discover hosts and services from scratch. TheHarvester focuses on collecting external information such as emails and subdomains, not on mapping a network’s live devices and services. Core Impact is a broader penetration testing platform, which may include discovery as part of its workflow, but the dedicated, widely used tool for network discovery and service enumeration is NMAP.

Discovering hosts and services on a network relies on a tool that can actively probe devices, determine which hosts are reachable, identify open ports, and reveal the services and versions running on those ports. NMAP is designed for exactly this purpose. It can perform a quick ping sweep to see which hosts are up, then scan ports to find open ones and probe those services to determine what software and versions are in use. This information is foundational for planning an attack path, because it shows where to focus exploitation attempts and what techniques might work.

Nessus, while valuable, is primarily a vulnerability scanner that builds on discovered hosts to assess weaknesses rather than discover hosts and services from scratch. TheHarvester focuses on collecting external information such as emails and subdomains, not on mapping a network’s live devices and services. Core Impact is a broader penetration testing platform, which may include discovery as part of its workflow, but the dedicated, widely used tool for network discovery and service enumeration is NMAP.