nerdexam
EC-Council

312-50V13 · Question #4

You have successfully comprised a server having an IP address of 10.10.0.5. You would like to enumerate all machines in the same network quickly. What is the best Nmap command you will use?

The correct answer is B. nmap -T4 -F 10.10.0.0/24. To quickly enumerate all machines in a specified network, Nmap should be used with an aggressive timing template and the fast scan option.

Submitted by eva_at· Mar 6, 2026Reconnaissance Techniques

Question

You have successfully comprised a server having an IP address of 10.10.0.5. You would like to enumerate all machines in the same network quickly. What is the best Nmap command you will use?

Options

  • Anmap -T4 -q 10.10.0.0/24
  • Bnmap -T4 -F 10.10.0.0/24
  • Cnmap -T4 -r 10.10.1.0/24
  • Dnmap -T4 -O 10.10.0.0/24

How the community answered

(19 responses)
  • B
    84% (16)
  • C
    5% (1)
  • D
    11% (2)

Why each option

To quickly enumerate all machines in a specified network, Nmap should be used with an aggressive timing template and the fast scan option.

Anmap -T4 -q 10.10.0.0/24

The `-q` option (quiet) suppresses output, which is counterproductive for enumeration where discovering information is the goal.

Bnmap -T4 -F 10.10.0.0/24Correct

The `nmap -T4` option sets an aggressive timing template for a faster scan, and the `-F` option performs a 'fast scan' by scanning only the 100 most common ports, making it efficient for quickly enumerating active hosts and their services. The `10.10.0.0/24` CIDR specifies the target network range.

Cnmap -T4 -r 10.10.1.0/24

The `-r` option (don't randomize ports) would typically make a scan slower, not faster, and `10.10.1.0/24` targets a different network segment than the compromised server.

Dnmap -T4 -O 10.10.0.0/24

The `-O` option is used for OS detection, which can be time-consuming and is not the primary objective for quickly enumerating all machines in a network.

Concept tested: Nmap network scanning for host enumeration

Source: https://nmap.org/book/man-briefoptions.html

Topics

#Nmap#network scanning#host discovery#network enumeration

Community Discussion

No community discussion yet for this question.

Full 312-50V13 Practice