312-50V12 · Question #106
You are attempting to run an Nmap port scan on a web server. Which of the following commands would result in a scan of common ports with the least amount of noise in order to evade IDS?
The correct answer is C. nmap -sT -O -T0. -T0 option is called "paranoid" because it's slow to try and avoid detection. "While -T0 and -T1 may be useful for avoiding IDS alerts, they will take an extraordinarily long time to scan thousands of machines or ports. For such a long scan, you may prefer to set the exact…
Question
Options
- Anmap -A - Pn
- Bnmap -sP -p-65535 -T5
- Cnmap -sT -O -T0
- Dnmap -A --host-timeout 99 -T1
How the community answered
(49 responses)- A8% (4)
- B16% (8)
- C71% (35)
- D4% (2)
Explanation
-T0 option is called "paranoid" because it's slow to try and avoid detection. "While -T0 and -T1 may be useful for avoiding IDS alerts, they will take an extraordinarily long time to scan thousands of machines or ports. For such a long scan, you may prefer to set the exact timing values you need rather than rely on the canned -T0 and -T1 values." You can find this in the official documentation: https://nmap.org/book/performance-timing-templates.html
Topics
Community Discussion
No community discussion yet for this question.