nerdexam
EC-Council

312-50V11 · Question #41

Which Nmap option would you use if you were not concerned about being detected and wanted to perform a very fast scan?

The correct answer is B. -T5. Nmap's -T5 'insane' timing template performs the fastest possible scan with no regard for detection, while -T0 is the slowest option designed specifically for stealth.

Scanning Networks

Question

Which Nmap option would you use if you were not concerned about being detected and wanted to perform a very fast scan?

Options

  • A-T0
  • B-T5
  • C-O
  • D-A

How the community answered

(27 responses)
  • A
    4% (1)
  • B
    85% (23)
  • C
    7% (2)
  • D
    4% (1)

Why each option

Nmap's -T5 'insane' timing template performs the fastest possible scan with no regard for detection, while -T0 is the slowest option designed specifically for stealth.

A-T0

-T0 is the 'paranoid' timing template that introduces very long delays between probes specifically to evade IDS detection, which is the opposite goal of a fast, unconcerned scan.

B-T5Correct

The -T5 'insane' template sets the most aggressive timing parameters available in Nmap - minimal inter-probe delays, maximum parallelism, and the shortest response timeouts - completing scans as rapidly as possible. Because it generates a high volume of packets in a very short time, it is highly visible to any IDS or traffic monitoring system. It is the correct choice when scan speed is the sole priority and detection is completely irrelevant.

C-O

-O enables OS detection by analyzing TCP/IP stack fingerprints and has no effect on scan speed or stealth level.

D-A

-A enables aggressive mode bundling OS detection, version detection, NSE script scanning, and traceroute together, but it is not a timing control and does not maximize raw scan speed.

Concept tested: Nmap timing templates for maximum scan speed

Source: https://nmap.org/book/man-performance.html

Topics

#Nmap timing#scan speed#stealth vs speed#network scanning

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice