While performing an Nmap scan against a host, Paola determines the existence of a firewall. In an attempt to determine whether the firewall is stateful or stateless, which of the following options wou

The ACK scan sends TCP packets with only the ACK flag set. A stateful firewall tracks connection state and will drop or block ACK packets that are not part of an established session, returning no response or an ICMP unreachable. A stateless firewall, which filters only by packet header rules, will often return an RST, revealing its nature and allowing the tester to differentiate between the two types.

The Xmas scan (-sX) sets FIN, PSH, and URG flags simultaneously and is used for stealth port scanning on certain OS types, not for identifying firewall stateful behavior.

The TCP connect scan (-sT) performs a full three-way handshake and is used for standard port discovery, not for probing the state-tracking capability of a firewall.

The FIN scan (-sF) sends packets with only the FIN flag and is used to evade simple packet filters during port scanning, not to distinguish stateful from stateless firewalls.