Exam GPEN All QuestionsBrowse all questions from this exam
Question 31

192.168.116.9 Is an IP address forvvww.scanned-server.com. Why are the results from the two scans, shown below, different?

    Correct Answer: C

    The suggested options (John.pot, John.conf, John.rec, John.ini) are unrelated to the question about IP address scans using the Nmap tool. John is a password-cracking tool, and none of these file types explain the difference in scan results. The reason the scans differ is actually because 'www.scanned-server.com' resolved to a different IP address (192.168.112.89), which likely corresponds to a different host or server. Therefore, the scan results are different due to the different target IP addresses.

Discussion
devnull

There is no correct answer in this option. john is a password cracking tool and has nothing to do with IP or host scanning tools. If I were to give an answer that is not in the choices, it would be because www.scanned-server.com is load balanced on multiple hosts and scanned a different host than 192.168.116.9.