Certified Ethical Hacker CEH · Free Practice Question Medium
Question 34
Danny, a black hat hacker, plans to scan the network of an organization using Nmap to identify potential vulnerabilities. However, he does not have time to scan all the available ports in the network. Which of the following options should he use to scan less number of ports?
- A A. Nmap -T2 -q 192.68.0.0/50
- B B. Nmap -T2 -F 192.68.0.0/50
- C C. Nmap -T2 -p 192.68.0.0/50
- D D. Nmap -T2 -O 192.68.0.0/50
Reveal correct answer
Correct answer: B
Explanation
Correct Answer: B. Nmap -T2 -F 192.68.0.0/50 Explanation: To scan fewer ports in the network, Danny should use the "-F" option in the Nmap command. The "-F" option tells Nmap to perform a fast scan by only scanning the most common 100 ports, rather than scanning all 65,535 TCP ports. This can significantly reduce the scan time and provide a faster overview of the most commonly used ports and any potential vulnerabilities. This command will scan the same range of IP addresses as before, but will only scan the most common 100 TCP ports on each host, and provide a faster scan result than scanning all the ports. Here's a breakdown of the options used in the command: nmap -T2 -F 192.68.0.0/50 ● "Nmap": This is the command to launch Nmap. ● "-T2": This option specifies the timing template to be used during the scan. The timing template determines how quickly Nmap sends packets to the target hosts. In this case, "-T2" sets a relatively slow timing template that should complete the scan more carefully and with less traffic than the default timing. ● "-F": This option tells Nmap to perform a "fast" scan, by only scanning the 100 most common ports for each host. This is a quicker scan method that can save time when you only need to identify the open ports on a host. ● "192.68.0.0/50": This specifies the range of IP addresses to be scanned. The "/50" at the end of the IP address is a CIDR notation that specifies the number of bits in the network mask, which in this case is 50. This range includes 2^14 (16,384) IP addresses, starting from 192.68.0.0 and ending at 192.68.63.255.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
