Certified Ethical Hacker CEH · Free Practice Question Hard
Question 61
Which of the following nmap commands should be utilized by a penetration tester that wants to scan every TCP registered port with fingerprinting, service, and operating system detection on a Class B network that is blocking ICMP?
- A nmap -Pn -A --sS –p 1-1024 -sS 172.16.1.0/16
- B nmap -Pn -A -O –p 1-1024 -sS 172.16.1.0/16
- C nmap -Pn -A -sT –p 0-65535 172.16.1.0/24
- D nmap -Pn -O -sS -p 1-65535 172.16.1.0/8
Reveal correct answer
Correct answer: B
Explanation
OBJ-2.2: There are several ways to answer this question, even if you don’t remember ever piece of the NMAP syntax. First, the question asks you to scan a Class B network, and if we want to scan the entire Class B, we would have to scan a /16. This removed two of our four choices. Now, considering the last two choices, we have a major differences: only one of these options would provide operating system detection (-O).Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
