PrepAway - Latest Free Exam Questions & Answers

Which NMAP switch would the hacker use?

A hacker is attempting to see which ports have been left open on a network. Which NMAP switch
would the hacker use?

PrepAway - Latest Free Exam Questions & Answers

A.
-sO

B.
-sP

C.
-sS

D.
-sU

13 Comments on “Which NMAP switch would the hacker use?

    1. Km says:

      Hi There, I am about to sit for CEHv8 exam. saw your comments and i agree C is the correct answer. could you please tell of all the questions are updated on AIOtestking?

  1. nash says:

    -sO is protocol scan and not OS. OS only if -O switch is used. Protocol scan indirectly answers the ports that are open since each well known port is tied to a know service.

    1. Joshua Dreifreund says:

      That sight probably used this site as the source, or else they both used the same source.
      -sO is a better answer.
      -sS is only working if you also use -p-

      1. Joshua Dreifreund says:

        also I forgot to say that -sS is a SYN scan, so only works on TCP. What if there are UDP ports open?
        “The flag -sO tells Nmap to perform an IP Protocol Scan. This type of scan iterates through the protocols found in the file nmap-protocols, and creates IP packets for every entry. For the IP protocols TCP, ICMP, UDP, IGMP, and SCTP, Nmap will set valid header values but for the rest, an empty IP packet will be used.”

        -sP is a ping scan, looking for hosts that are up.
        -sU will scan using UDP.

        So, the best answer is -sO


Leave a Reply