312-50V11 · Question #964
A security analyst uses Zenmap to perform an ICMP timestamp ping scan to acquire information related to the current time from the target host machine. Which of the following Zenmap options must the an
The correct answer is C. -PP. The -PP flag in Nmap/Zenmap sends ICMP timestamp request packets (type 13), making it the correct option for an ICMP timestamp ping scan.
Question
Options
- A-PY
- B-PU
- C-PP
- D-Pn
How the community answered
(29 responses)- A3% (1)
- C93% (27)
- D3% (1)
Why each option
The -PP flag in Nmap/Zenmap sends ICMP timestamp request packets (type 13), making it the correct option for an ICMP timestamp ping scan.
-PY performs an SCTP INIT ping scan, which is unrelated to ICMP timestamp requests.
-PU performs a UDP ping scan by sending UDP datagrams to target ports, not ICMP timestamp requests.
The -PP option instructs Nmap to send ICMP timestamp request packets (ICMP type 13), which elicit ICMP timestamp reply packets (type 14) from responsive hosts. This allows the analyst to confirm host liveness and potentially retrieve time-related information from the target. This is the specific flag documented in Nmap's host discovery options for ICMP timestamp pings.
-Pn disables host discovery entirely and treats all hosts as online, sending no ping packets at all.
Concept tested: Nmap ICMP timestamp ping host discovery flag
Source: https://nmap.org/book/man-host-discovery.html
Topics
Community Discussion
No community discussion yet for this question.