Sam is a penetration tester hired by Inception Tech, a security organization. He was asked to perform port scanning on a target host in the network. While performing the given task, Sam sends…

An Xmas scan sends packets with FIN, PSH, and URG flags all set simultaneously, not FIN/ACK probes, and relies on the absence of a response to indicate open ports on RFC-compliant systems.

The IDLE/IPID header scan is a stealth technique that uses a zombie host's IP ID sequence numbers to infer port states, and does not involve sending FIN/ACK probes directly to the target.

The TCP Maimon scan, discovered by Uriel Maimon, sends FIN/ACK probe packets to target ports. According to RFC 793, closed ports should respond with an RST packet, while open ports typically drop the packet with no response. This behavior allows the scanner to distinguish between open and closed ports based on whether an RST is received.

An ACK flag probe scan sends packets with only the ACK flag set to determine firewall rulesets and whether ports are filtered or unfiltered, not to identify open vs. closed ports using FIN/ACK probes.