Service and Version Discovery
Evidence: Mixed
Revision: Available · 4 questions · 1 flashcard
Exam relevance
Learning-only · no verified exam mapping
Reviewed revision scope
- Classroom (Session 6): from Kali Linux, the tutor ran nmap -sV against the Metasploitable VM's lab address, describing nmap as a tool for network and service discovery and -sV as service and version detection.
- Classroom (Session 6): the tutor described Kali Linux as the attacking machine and Metasploitable as the victim.
- Supplementary: version detection infers the service and version from probes and banners, so a result can be useful, incomplete or wrong.
- Supplementary: discovery, vulnerability research and exploitation are different activities, and active discovery and exploitation both need authorisation.
- Supplementary: the Study Guide's guided lab is instructional and not yet completed; it covers checking the lab topology, service and version discovery, recording observations and vulnerability research, and deliberately stops before exploitation.
- Session 6: Networking Fundamentals — Part 2 — Classroom session record
- Service Discovery and Vulnerability Research — Supplementary Study Guide explanation
- Guided Lab: Kali and Metasploitable Service Discovery — Supplementary Study Guide explanation
Outside the authored revision scope
- Ports, services, versions or other output from the demonstration
- Performing scans personally
- Nmap options other than -sV
- Exploitation
- Unverified exam objectives
Recorded evidence
- Classroom (Session 6): from Kali Linux, the tutor ran nmap -sV against the Metasploitable VM's lab address, describing nmap as a tool for network and service discovery and -sV as service and version detection.
- Classroom (Session 6): the tutor described Kali Linux as the attacking machine and Metasploitable as the victim.
- Supplementary: version detection infers the service and version from probes and banners, so a result can be useful, incomplete or wrong.
- Supplementary: discovery, vulnerability research and exploitation are different activities, and active discovery and exploitation both need authorisation.
- Supplementary: the Study Guide's guided lab is instructional and not yet completed; it covers checking the lab topology, service and version discovery, recording observations and vulnerability research, and deliberately stops before exploitation.
- Session 6: Networking Fundamentals — Part 2 — Classroom session record · Sections 2–8: Kali Linux with NAT and host-only adapters; Metasploitable with a host-only adapter only; the msfadmin login; ifconfig on both machines; the attacking and victim roles; nmap -sV against the Metasploitable lab address; researching detected versions for known vulnerabilities
- Service Discovery and Vulnerability Research — Supplementary Study Guide explanation · Ports and services; Discovery, research and exploitation; Service and version detection with Nmap; From version to vulnerability: a research workflow; Where to research; Why a match is not confirmation
- Guided Lab: Kali and Metasploitable Service Discovery — Supplementary Study Guide explanation · Objective; Step 9 — Stop before exploitation; Completion status
Not established by the recorded evidence
- Ports, services, versions or other output from the demonstration
- Performing scans personally
- Nmap options other than -sV
- Exploitation
- Unverified exam objectives
Reviewed 2026-09-25. Reviewed against the Session 6 Learning Log and the Service Discovery and Vulnerability Research and Guided Lab lesson Sources and scope sections. Scope statements are labelled Classroom or Supplementary, and revision scope is the reviewed evidence scope. No practical competence, completed lab or exam alignment is implied.