A network administrator suspects a server has been compromised and an unauthorized service is listening for incoming connections. Which of the following command-line tools would be the most effective for the administrator to use to view the server's open ports and active connections?
The netstat command is a command-line tool used to display active TCP connections, ports on which the computer is listening, Ethernet statistics, the IP routing table, and more. It is the most appropriate tool among the choices for identifying unauthorized listening ports and active connections on a server. ping is used to test reachability, tracert traces the route to a host, and ipconfig displays the local IP configuration.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is netstat and how does it work?
Open an interactive chat with Bash
What are open ports and why are they important?
Open an interactive chat with Bash
What are some common tools besides netstat that can monitor network connections?