312-50V13 · Question #404
A security analyst uses Zenmap to perform an ICMP timestamp ping scan to acquire information related to the current time from the target host machine. Which of the following Zenmap options must the an
The correct answer is C. -PP. To perform an ICMP timestamp ping scan using Nmap (or Zenmap), the analyst must use the -PP option.
Question
Options
- A-PY
- B-PU
- C-PP
- D-Pn
How the community answered
(31 responses)- A3% (1)
- B3% (1)
- C84% (26)
- D10% (3)
Why each option
To perform an ICMP timestamp ping scan using Nmap (or Zenmap), the analyst must use the `-PP` option.
The `-PY` option is used for SCTP INIT ping scan, not ICMP timestamp.
The `-PU` option is used for UDP ping scan, sending empty UDP packets to common ports.
The `-PP` option in Nmap performs an ICMP timestamp request scan, which can be used to determine if a target host is alive and to gather information related to the current time from the target machine. This method sends ICMP type 13 (timestamp request) packets and listens for type 14 (timestamp reply) packets.
The `-Pn` option treats all hosts as online, skipping the host discovery phase entirely, which is not an ICMP timestamp scan.
Concept tested: Nmap ICMP timestamp scan
Source: https://nmap.org/book/man-host-discovery.html
Topics
Community Discussion
No community discussion yet for this question.