nerdexam
EC-Council

312-50V11 · Question #853

You have successfully comprised a server having an IP address of 10.10.0.5. You would like to enumerate all machines in the same network quickly. What is the best Nmap command you will use?

The correct answer is B. nmap -T4 -F 10.10.0.0/24. The -F flag instructs Nmap to perform a fast scan by limiting port checks to the top 100 most common ports, making it the most efficient option for quickly enumerating live hosts across a subnet.

Scanning Networks

Question

You have successfully comprised a server having an IP address of 10.10.0.5. You would like to enumerate all machines in the same network quickly. What is the best Nmap command you will use?

Options

  • Anmap -T4 -q 10.10.0.0/24
  • Bnmap -T4 -F 10.10.0.0/24
  • Cnmap -T4 -r 10.10.1.0/24
  • Dnmap -T4 -O 10.10.0.0/24

How the community answered

(40 responses)
  • A
    3% (1)
  • B
    90% (36)
  • C
    5% (2)
  • D
    3% (1)

Why each option

The -F flag instructs Nmap to perform a fast scan by limiting port checks to the top 100 most common ports, making it the most efficient option for quickly enumerating live hosts across a subnet.

Anmap -T4 -q 10.10.0.0/24

The -q flag is not a valid Nmap option and would cause the command to fail.

Bnmap -T4 -F 10.10.0.0/24Correct

The -F (fast) flag reduces the default port scan from 1000 ports to the top 100, significantly speeding up discovery across an entire /24 subnet. Combined with -T4 aggressive timing and the correct subnet 10.10.0.0/24 matching the compromised host at 10.10.0.5, this is the optimal quick enumeration command.

Cnmap -T4 -r 10.10.1.0/24

The subnet 10.10.1.0/24 is incorrect - the compromised host 10.10.0.5 belongs to 10.10.0.0/24, and -r scans ports consecutively rather than enabling fast host discovery.

Dnmap -T4 -O 10.10.0.0/24

The -O flag enables OS detection, which is slower and does not optimize for quick host enumeration across a network.

Concept tested: Nmap fast scan flag for network enumeration

Source: https://nmap.org/book/man-port-specification.html

Topics

#Nmap#fast scan#network enumeration#subnet scanning

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice