Digital Forensic Certification Practice Exam

Which netstat parameter shows all active TCP connections and UDP ports the computer is listening on?

1. netstat -n

2. netstat -a

3. netstat -o

4. netstat -p

The correct answer is: netstat -a

The command that shows all active TCP connections and UDP ports the computer is listening on is indeed the one that combines complete information about various network connections. Using the parameter that displays all connections and listening ports provides a comprehensive view of the system's network activity. This includes not only established TCP connections but also any UDP ports open for listening. The other parameters modify the output in ways that limit the information presented. For example, one parameter focuses on showing numerical addresses and port numbers without resolving them into hostnames, which can be useful but does not provide the same level of detail regarding the listening state. Another parameter might include process identifiers associated with each connection, which is valuable for identifying the applications but does not necessarily indicate all listening ports. Understanding the nuances of these options can help in diagnosing network issues or monitoring system security effectively.