During enumeration to discover services on other machines, which action is most appropriate for service discovery?

• A. Use db_nmap -sV -sC <IP> in Metasploit
• B. Use a ping sweep
• C. Query WMI
• D. Check event logs

Answer: (A)

The essential approach here is to identify what services are running on remote machines by actively discovering open ports and probing them for version details. Running a port scan with version detection and default scripts, using the Metasploit-integrated scanner, directly achieves this. It reveals open ports, the services bound to them, and their versions, and it stores the results for later use in exploitation or further analysis.

A ping sweep only shows which hosts are alive and doesn’t disclose any services. Querying WMI can expose some Windows-specific information but isn’t a broad, network-wide method for discovering services across many machines. Checking event logs is a local, post-event source and doesn’t help with mapping services on remote hosts. So, performing a versioned scan with script-assisted probing is the most effective choice for service discovery.