Which NMAP command combination would let a tester scan every TCP port from a class C network that is blocking ICMP with fingerprinting and service detection?

Question

Options

• ANMAP -PN -A -O -sS 192.168.2.0/24
• BNMAP -P0 -A -O -p1-65535 192.168.0/24
• CNMAP -P0 -A -sT -p0-65535 192.168.0/16
• DNMAP -PN -O -sS -p 1-1024 192.168.0/8

• A
  15% (6)
• B
  72% (28)
• C
  3% (1)
• D
  10% (4)

Explanation

Breaking down the requirements: (1) skip ICMP/host discovery to bypass ICMP blocking - use -P0 or -PN; (2) scan ALL TCP ports - requires -p1-65535; (3) OS fingerprinting and service detection - -O for OS detection, -A for aggressive mode (includes service/version detection, scripts, traceroute); (4) Class C network - a /24 subnet. Option B (-P0 -A -O -p1-65535 192.168.0/24) satisfies all four requirements. Option A lacks the all-ports flag (-p1-65535) so it only scans the default top-1000 ports. Option C uses /16 which is a Class B network. Option D only scans ports 1–1024 (not all ports) and uses /8 which is a Class A network.

No community discussion yet for this question.