If you plan on taking the Security+ exam you should have a basic understanding of port scanners. Many blogs on this site include information on ports and port scanners determine what ports are open and in turn, what protocols or services are running on a system. If desired, you can review the following blogs on ports:
- Security+ Ports
- Ports for Network+, Security+, and SSCP Exams
- Protocol IDs for Security+ and SSCP Exams
Note: This blog is an excerpt from the
CompTIA Security+: Get Certified Get Ahead: SY0-301 Study Guide.
Port Scanners
A port scanner is a tool used to query a host to determine which ports are open. System administrators use port scanners as part of an overall vulnerability assessment. It is also used as part of an attack, where an attacker tries to learn as much about a server as possible.
Remember this
A port scanner can help determine what services and protocols are running on a remote system by identifying open ports. Port scanners typically take further steps to verify the port is open.
 | Pass the First Time! |
Up-to-date Content
New multiple-choice and performance-based questions added regularly
Pass the first time with quality practice test questions, performance-based questions, flashcards, and audio.Buy The Full Access Study Package Today
60 Days Access
Need more time? You can easily renew for another 60 days at a significantly reduced price.
All materials are available online shortly after making your payment.
Get the Security+ Full Access Study Package Here
Our online Security+ study materials are the perfect complement to the CompTIA Security+: Get Certified Get Ahead: SY0-501 Study Guide. They can also be used to help ensure you’re ready no matter what study guide you’re using.
This exam is expensive.
Make sure you’re ready before exam day.
Here’s what you’ll get:- All of the multiple-choice questions from the best-selling CompTIA Security+: Get Certified Get Ahead: SY0-501 Study Guide. See a demo here. All questions have full explanations so you’ll know why the correct answers are correct and why the incorrect answers are incorrect.
- Over 40 new multiple-choice questions we’ve added after publishing the study guide.
- Over 30 performance-based questions. See a demo here.
- All of the flashcards from the study guide. View them in any Web browser.
- All of the audio from the study guide. Listen to a sample here.
- Access to a free discount code for 10% off your Security+ voucher.
Buy The Full Access Study Package Today
60 Days Access
All materials are available online shortly after making your payment.
The port scanner sends queries to ports of interest and analyzes the reply. If a server answers a query on a specific port, the associated service or protocol is likely running on the server. For example, if a server answers a query on port 25, it indicates that port 25 is open. More specifically, it indicates that the server is probably running SMTP. If port 80 is open, HTTP is probably running, and the server may be a web server such as Apache or Microsoft’s Internet Information Services (IIS).
Even though it’s not recommended for services to use ports other than the well-known ports for specific services, it is possible. Because of this, an open port doesn’t definitively say the related service or protocol is running.
The attacker will use other methods for verification. For example, a fingerprinting attack will send specific protocol queries to the server and analyze the responses. These responses can verify that the service is running and will often include other details about the operating system, since different operating systems often respond differently to specific queries.
A common TCP port scan will send a TCP SYN packet to a specific port of a server as part of the TCP three-way handshake. If the server responds with a SYN/ACK packet, the scanner knows the port is open. However, instead of completing the three-way handshake, the scanner sends a RST packet to reset the connection and then repeats the process with a different port.
| Pass the First Time! |
Up-to-date Content
New multiple-choice and performance-based questions added regularly
Pass the first time with quality practice test questions, performance-based questions, flashcards, and audio.Buy The Full Access Study Package Today
60 Days Access
Need more time? You can easily renew for another 60 days at a significantly reduced price.
All materials are available online shortly after making your payment.
Get the Security+ Full Access Study Package Here
Our online Security+ study materials are the perfect complement to the CompTIA Security+: Get Certified Get Ahead: SY0-601 Study Guide. They can also be used to help ensure you’re ready no matter what study guide you’re using.
This exam is expensive.
Make sure you’re ready before exam day.
Here’s what you’ll get:- All of the multiple-choice questions from the best-selling CompTIA Security+: Get Certified Get Ahead: SY0-601 Study Guide. See a demo here. All questions have full explanations so you’ll know why the correct answers are correct and why the incorrect answers are incorrect.
- Realistic SY0-601 Security+ Practice Test Questions
- Performance-based questions.
- All of the flashcards from the study guide. View them in any Web browser. See demo here
- All of the audio from the study guide.
- Access to a free discount code for 10% off your Security+ voucher.
Buy The Full Access Study Package Today
60 Days Access
All materials are available online shortly after making your payment.
Other Security+ Study Resources
- Security+ blogs organized by categories
- Security+ blogs with free practice test questions
- Security+ blogs on new performance based questions
- Mobile Apps: Apps for mobile devices running iOS or Android
- Audio Files: (Learn by listening with over 4 1/2 hours of audio on Security+ topics)
- Flashcards: 31 Security+ Topic flashcards and 17 Security+ acronyms flashcards (free samples)
- Quality Practice Test Questions: Over 475 quality Security+ practice test questions with full explanations
- Full Security+ Study Packages: Quality practice test questions, audio, and Flashcards)
