nerdexam
EC-Council

312-50V11 · Question #964

A security analyst uses Zenmap to perform an ICMP timestamp ping scan to acquire information related to the current time from the target host machine. Which of the following Zenmap options must the an

The correct answer is C. -PP. The -PP flag in Nmap/Zenmap sends ICMP timestamp request packets (type 13), making it the correct option for an ICMP timestamp ping scan.

Scanning Networks

Question

A security analyst uses Zenmap to perform an ICMP timestamp ping scan to acquire information related to the current time from the target host machine. Which of the following Zenmap options must the analyst use to perform the ICMP timestamp ping scan?

Options

  • A-PY
  • B-PU
  • C-PP
  • D-Pn

How the community answered

(29 responses)
  • A
    3% (1)
  • C
    93% (27)
  • D
    3% (1)

Why each option

The -PP flag in Nmap/Zenmap sends ICMP timestamp request packets (type 13), making it the correct option for an ICMP timestamp ping scan.

A-PY

-PY performs an SCTP INIT ping scan, which is unrelated to ICMP timestamp requests.

B-PU

-PU performs a UDP ping scan by sending UDP datagrams to target ports, not ICMP timestamp requests.

C-PPCorrect

The -PP option instructs Nmap to send ICMP timestamp request packets (ICMP type 13), which elicit ICMP timestamp reply packets (type 14) from responsive hosts. This allows the analyst to confirm host liveness and potentially retrieve time-related information from the target. This is the specific flag documented in Nmap's host discovery options for ICMP timestamp pings.

D-Pn

-Pn disables host discovery entirely and treats all hosts as online, sending no ping packets at all.

Concept tested: Nmap ICMP timestamp ping host discovery flag

Source: https://nmap.org/book/man-host-discovery.html

Topics

#ICMP timestamp ping#Nmap flags#Zenmap#network scanning

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice