312-50V13 · Question #4
You have successfully comprised a server having an IP address of 10.10.0.5. You would like to enumerate all machines in the same network quickly. What is the best Nmap command you will use?
The correct answer is B. nmap -T4 -F 10.10.0.0/24. To quickly enumerate all machines in a specified network, Nmap should be used with an aggressive timing template and the fast scan option.
Question
Options
- Anmap -T4 -q 10.10.0.0/24
- Bnmap -T4 -F 10.10.0.0/24
- Cnmap -T4 -r 10.10.1.0/24
- Dnmap -T4 -O 10.10.0.0/24
How the community answered
(19 responses)- B84% (16)
- C5% (1)
- D11% (2)
Why each option
To quickly enumerate all machines in a specified network, Nmap should be used with an aggressive timing template and the fast scan option.
The `-q` option (quiet) suppresses output, which is counterproductive for enumeration where discovering information is the goal.
The `nmap -T4` option sets an aggressive timing template for a faster scan, and the `-F` option performs a 'fast scan' by scanning only the 100 most common ports, making it efficient for quickly enumerating active hosts and their services. The `10.10.0.0/24` CIDR specifies the target network range.
The `-r` option (don't randomize ports) would typically make a scan slower, not faster, and `10.10.1.0/24` targets a different network segment than the compromised server.
The `-O` option is used for OS detection, which can be time-consuming and is not the primary objective for quickly enumerating all machines in a network.
Concept tested: Nmap network scanning for host enumeration
Source: https://nmap.org/book/man-briefoptions.html
Topics
Community Discussion
No community discussion yet for this question.