CS0-003 Ports, Cisco, Cyber Kill Chain

Question 1

Port 20, 21

Answer 1

FTP

Question 2

Port 22

Answer 2

SSH

Question 3

Port 23

Answer 3

Telnet

Question 4

Port 25

Answer 4

SMTP

Question 5

Port 53

Answer 5

DNS

Question 6

Port 80

Answer 6

HTTP

Question 7

Port 110

Answer 7

Post Office Protocol version 3 (POP3)

Question 8

Port 123

Answer 8

Network Time Protocol (NTP)

Question 9

Port 135

Answer 9

Windows Sharing

Question 10

Port 137

Answer 10

Windows Sharing

Question 11

Port 138

Answer 11

Windows Sharing

Question 12

Port 139

Answer 12

Windows Sharing

Question 13

Port 445

Answer 13

Windows Sharing

Question 14

Port 143

Answer 14

Internet Message Access Protocol (IMAP)

Question 15

Port 161

Answer 15

Simple Network Management Protocol (SNMP)

Question 16

Port 162

Answer 16

Simple Network Management Protocol (SNMP)

Question 17

Port 443

Answer 17

HTTPS

Question 18

Port 636

Answer 18

Lightweight Directory Access Protocol Secure (LDAPS)

Question 19

Port 1433

Answer 19

SQL Server

Question 20

Port 1434

Answer 20

SQL Server

Question 21

Port 1521

Answer 21

Oracle

Question 22

Port 1720

Answer 22

H.323 (Voice over IP)

Question 23

Port 1723

Answer 23

Point-to-Point Tunneling Protocol (PPTP)

Question 24

Port 3389

Answer 24

Remote Desktop Protocol (RDP)

Question 25

Port 9100

Answer 25

HP JetDirect Printing

Question 26

CVSS 0

Answer 26

None

Question 27

CVSS 0.1-3.9

Answer 27

Low

Question 28

CVSS 4.0-6.9

Answer 28

Medium

Question 29

CVSS 7.0-8.9

Answer 29

High

Question 30

CVSS 9.0-10

Answer 30

Critical

Question 31

Cisco 0

Answer 31

Emergency

Question 32

Cisco 1

Answer 32

Alert

Question 33

Cisco 2

Answer 33

Critical

Question 34

Cisco 3

Answer 34

Error

Question 35

Cisco 4

Answer 35

Warning

Question 36

Cisco 5

Answer 36

Notification

Question 37

Cisco 6

Answer 37

Informational

Question 38

Cisco 7

Answer 38

Debug

Question 39

Reconnaissance

Answer 39

Gather OSINT Information

Question 40

Weaponization

Answer 40

Goal: Create a malicious payload (usually a combination of malware + exploit). Example: The attacker creates a PDF that exploits a known vulnerability and embeds a Remote Access Trojan (RAT) inside.

Question 41

Delivery

Answer 41

Goal: Transmit the payload to the target. Example: The malicious PDF is emailed to an employee disguised as an invoice from a known vendor.

Question 42

Exploitation

Answer 42

Goal: Trigger the malicious code on the target system. Example: The employee opens the PDF, which silently executes code due to the vulnerability.

Question 43

Installation

Answer 43

Goal: Install malware on the victim’s machine. Example: The RAT (random access trojan) is installed on the system, giving the attacker persistent access.

Question 44

Command and Control (C2)

Answer 44

Goal: Establish communication with the attacker’s server. Example: The RAT (random access trojan) contacts the attacker's server to receive instructions like downloading more tools or stealing files.

Question 45

Actions and Objectives

Answer 45

Goal: Complete the attack objective (data theft, destruction, surveillance, etc.). Example: The attacker exfiltrates sensitive customer data or installs ransomware.