nerdexam
EC-Council

312-50V10 · Question #133

Which of the following is considered as one of the most reliable forms of TCP scanning?

The correct answer is A. TCP Connect/Full Open Scan. TCP Connect (Full Open) scanning completes the full 3-way handshake, making it the most reliable method for definitively confirming open ports.

Scanning Networks

Question

Which of the following is considered as one of the most reliable forms of TCP scanning?

Options

  • ATCP Connect/Full Open Scan
  • BHalf-open Scan
  • CNULL Scan
  • DXmas Scan

How the community answered

(44 responses)
  • A
    89% (39)
  • B
    2% (1)
  • C
    7% (3)
  • D
    2% (1)

Why each option

TCP Connect (Full Open) scanning completes the full 3-way handshake, making it the most reliable method for definitively confirming open ports.

ATCP Connect/Full Open ScanCorrect

TCP Connect scanning completes the entire TCP 3-way handshake (SYN, SYN-ACK, ACK) using the OS's connect() system call, which guarantees a definitive open/closed result for each port. Because the handshake fully completes, it works correctly across all operating systems and network configurations. This reliability comes at the cost of being easily logged by the target system.

BHalf-open Scan

Half-open (SYN) scanning never completes the handshake, which can yield ambiguous results in certain firewall or filtering configurations.

CNULL Scan

NULL scans send packets with no TCP flags set and are unreliable because Windows systems typically do not respond as the RFC specifies, producing false negatives.

DXmas Scan

Xmas scans set FIN, PSH, and URG flags simultaneously and are similarly unreliable against Windows hosts and non-RFC-compliant stacks.

Concept tested: TCP port scanning methods and reliability

Source: https://nmap.org/book/man-port-scanning-techniques.html

Topics

#TCP connect scan#full open scan#port scanning#TCP reliability

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice