Exam 312-50v13 Topic 1 Question 138 Discussion

Actual exam question for ECCouncil's 312-50v13 exam
Question #: 138
Topic #: 1
Which utility will tell you in real time which ports are listening or in another state?

Suggested Answer: B Vote an answer

Comprehensive and Detailed Explanation:
TCPView is a Windows Sysinternals utility that provides a real-time graphical view of:
* TCP and UDP endpoints on the system
* Listening, established, and closing states
* Associated process names using the connections
It's ideal for administrators or analysts looking to monitor and troubleshoot live network activity.
From CEH v13 Courseware:
* Module 3: Scanning Networks # Tools for Port and Service Discovery
Incorrect Options:
* A. Netstat provides snapshot (static) info, not real-time with process association.
* C. Nmap is used for remote scanning, not real-time local monitoring.
* D. Loki is a covert channel tool used for stealthy communication.
Reference:CEH v13 Study Guide - Module 3: TCPView vs NetstatMicrosoft Sysinternals - TCPView Documentation

by Glenn at Jan 15, 2026, 09:10 PM

Limited Time Offer

15%

Off

Get Premium 312-50v13 Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10