Question

There is strong evidence that a machine is compromised on your company network, but you have not determined which computer. you are going to try to pinpoint the host by scanning for any network devices that are in promiscuous mode. which of the following nmap scripts would you use?

a.Sniffer-detect
b.host-discovery
c.network-compromise
d.discovery-promisc

Answer 1

To pinpoint the compromised host on the network, you should use the nmap script 'network-compromised.discovery-promisc'.

Step-by-step explanation:

The appropriate nmap script to use in this scenario would be network-compromised.discovery-promisc. This script is specifically designed to detect network devices that are in promiscuous mode, which can be an indication of a compromised host on the network.