nerdexam
EC-Council

312-50V12 · Question #106

You are attempting to run an Nmap port scan on a web server. Which of the following commands would result in a scan of common ports with the least amount of noise in order to evade IDS?

The correct answer is C. nmap -sT -O -T0. -T0 option is called "paranoid" because it's slow to try and avoid detection. "While -T0 and -T1 may be useful for avoiding IDS alerts, they will take an extraordinarily long time to scan thousands of machines or ports. For such a long scan, you may prefer to set the exact…

Submitted by devops_kid· Mar 4, 2026Reconnaissance Techniques

Question

You are attempting to run an Nmap port scan on a web server. Which of the following commands would result in a scan of common ports with the least amount of noise in order to evade IDS?

Options

  • Anmap -A - Pn
  • Bnmap -sP -p-65535 -T5
  • Cnmap -sT -O -T0
  • Dnmap -A --host-timeout 99 -T1

How the community answered

(49 responses)
  • A
    8% (4)
  • B
    16% (8)
  • C
    71% (35)
  • D
    4% (2)

Explanation

-T0 option is called "paranoid" because it's slow to try and avoid detection. "While -T0 and -T1 may be useful for avoiding IDS alerts, they will take an extraordinarily long time to scan thousands of machines or ports. For such a long scan, you may prefer to set the exact timing values you need rather than rely on the canned -T0 and -T1 values." You can find this in the official documentation: https://nmap.org/book/performance-timing-templates.html

Topics

#Nmap#Port scanning#IDS evasion#Network reconnaissance#Stealth scanning

Community Discussion

No community discussion yet for this question.

Full 312-50V12 Practice