EC-Council
312-50V10 · Question #698
312-50V10 Question #698: Real Exam Question with Answer & Explanation
The correct answer is A: nmap -p 445 -n -T4 -open 10.1.0.0/16. The fastest Nmap command for scanning a single TCP port across a large subnet combines targeted port specification, disabled DNS resolution, and aggressive timing. Since stealth is not a concern, maximum speed flags can be applied freely.
Question
Trinity needs to scan all hosts on a /16 network for TCP port 445 only. What is the fastest way she can accomplish this with Nmap? Stealth is not a concern.
Options
- Anmap -p 445 -n -T4 -open 10.1.0.0/16
- Bnmap -p 445 -max -Pn 10.1.0.0/16
- Cnmap -sn -sF 10.1.0.0/16 445
- Dnmap -s 445 -sU -T5 10.1.0.0/16
Explanation
The fastest Nmap command for scanning a single TCP port across a large subnet combines targeted port specification, disabled DNS resolution, and aggressive timing. Since stealth is not a concern, maximum speed flags can be applied freely.
Common mistakes.
- B. -max is not a valid Nmap flag, making this command syntactically incorrect and non-functional as written.
- C. -sn performs a ping sweep with no port scanning at all, so combining it with -sF and a port number does not produce a valid port 445 scan.
- D. -s 445 is not a recognized Nmap flag, and -sU specifies a UDP scan rather than the TCP scan required to check port 445.
Concept tested. Nmap flags for fast targeted TCP port scanning
Reference. https://nmap.org/book/man-briefoptions.html
Community Discussion
No community discussion yet for this question.