303-300 · Question #24
Which of the following terms refer to existing scan techniques with nmap? (Choose TWO correct answers.)
The correct answer is A. Xmas Scan C. FIN Scan. Xmas Scan (-sX) and FIN Scan (-sF) are both legitimate, well-documented nmap techniques. The Xmas Scan sets the FIN, PSH, and URG flags simultaneously (hence "lit up like a Christmas tree"), while the FIN Scan sends only the FIN flag - both exploit how closed ports respond to…
Question
Which of the following terms refer to existing scan techniques with nmap? (Choose TWO correct answers.)
Options
- AXmas Scan
- BZero Scan
- CFIN Scan
- DIP Scan
- EUDP SYN Scan
How the community answered
(15 responses)- A87% (13)
- D7% (1)
- E7% (1)
Explanation
Xmas Scan (-sX) and FIN Scan (-sF) are both legitimate, well-documented nmap techniques. The Xmas Scan sets the FIN, PSH, and URG flags simultaneously (hence "lit up like a Christmas tree"), while the FIN Scan sends only the FIN flag - both exploit how closed ports respond to unexpected flag combinations, making them useful for stealthy enumeration.
Why the distractors are wrong:
- B (Zero Scan) doesn't exist - the real equivalent is the Null Scan (
-sN), which sends packets with no flags set; "Zero Scan" is a fabricated name designed to confuse. - D (IP Scan) is not a standard nmap scan type; there is an IP protocol scan (
-sO), but "IP Scan" as a named technique doesn't exist. - E (UDP SYN Scan) is a contradiction - SYN is a TCP flag and cannot be applied to UDP; nmap's UDP scan (
-sU) works on entirely different mechanics.
Memory tip: Remember the "stealth trio" of nmap TCP flag manipulation scans - FIN, Null, and Xmas (-sF, -sN, -sX). If you keep those three in mind, you can immediately rule out anything that doesn't match real flag combinations or mixes incompatible protocols (like "UDP SYN").
Topics
Community Discussion
No community discussion yet for this question.