312-50V11 · Question #41
Which Nmap option would you use if you were not concerned about being detected and wanted to perform a very fast scan?
The correct answer is B. -T5. Nmap's -T5 'insane' timing template performs the fastest possible scan with no regard for detection, while -T0 is the slowest option designed specifically for stealth.
Question
Which Nmap option would you use if you were not concerned about being detected and wanted to perform a very fast scan?
Options
- A-T0
- B-T5
- C-O
- D-A
How the community answered
(27 responses)- A4% (1)
- B85% (23)
- C7% (2)
- D4% (1)
Why each option
Nmap's -T5 'insane' timing template performs the fastest possible scan with no regard for detection, while -T0 is the slowest option designed specifically for stealth.
-T0 is the 'paranoid' timing template that introduces very long delays between probes specifically to evade IDS detection, which is the opposite goal of a fast, unconcerned scan.
The -T5 'insane' template sets the most aggressive timing parameters available in Nmap - minimal inter-probe delays, maximum parallelism, and the shortest response timeouts - completing scans as rapidly as possible. Because it generates a high volume of packets in a very short time, it is highly visible to any IDS or traffic monitoring system. It is the correct choice when scan speed is the sole priority and detection is completely irrelevant.
-O enables OS detection by analyzing TCP/IP stack fingerprints and has no effect on scan speed or stealth level.
-A enables aggressive mode bundling OS detection, version detection, NSE script scanning, and traceroute together, but it is not a timing control and does not maximize raw scan speed.
Concept tested: Nmap timing templates for maximum scan speed
Source: https://nmap.org/book/man-performance.html
Topics
Community Discussion
No community discussion yet for this question.