312-50V9 · Question #291
Emil uses nmap to scan two hosts using this command. nmap -sS -T4 -O 192.168.99.1 192.168.99.7 He receives this output: Nmap scan report for 192.168.99.1 Host is up (0.00082s latency). Not shown: 994
The correct answer is B. He performed a SYN scan and OS scan on hosts 192.168.99.1 and 192.168.99.7.. The nmap flags -sS and -O indicate a SYN scan combined with OS detection, making option B the only conclusion directly supported by the command syntax and output.
Question
Emil uses nmap to scan two hosts using this command. nmap -sS -T4 -O 192.168.99.1 192.168.99.7 He receives this output:
Nmap scan report for 192.168.99.1 Host is up (0.00082s latency). Not shown: 994 filtered ports PORT STATE SERVICE 21/tcp open ftp 23/tcp open telnet 53/tcp open domain 80/tcp open http 161/tcp closed snmp MAC Address: B0:75:D5:33:57:74 (ZTE) Device type: general purpose Running: Linux 2.6.X OS CPE: cpe:/o:linux:linux_kernel:2.6 OS details: Linux 2.6.9 - 2.6.33 Network Distance: 1 hop Nmap scan report for 192.168.99.7 Host is up (0.000047s latency). All 1000 scanned ports on 192.168.99.7 are closed Too many fingerprints match this host to give specific OS details Network Distance: 0 hops What is his conclusion?
Options
- AHost 192.168.99.7 is an iPad.
- BHe performed a SYN scan and OS scan on hosts 192.168.99.1 and 192.168.99.7.
- CHost 192.168.99.1 is the host that he launched the scan from.
- DHost 192.168.99.7 is down.
How the community answered
(20 responses)- A5% (1)
- B75% (15)
- C5% (1)
- D15% (3)
Why each option
The nmap flags -sS and -O indicate a SYN scan combined with OS detection, making option B the only conclusion directly supported by the command syntax and output.
Nmap reported 'Too many fingerprints match this host to give specific OS details' for 192.168.99.7, meaning OS identification failed entirely and no device type can be concluded.
The -sS flag explicitly instructs nmap to perform a TCP SYN (half-open) scan, and the -O flag instructs nmap to attempt OS fingerprinting on each target. Both 192.168.99.1 and 192.168.99.7 appear in the scan report as live hosts, confirming both were scanned. This conclusion is directly provable from the command itself without inference.
A Network Distance of 0 hops for 192.168.99.7 indicates it is the local machine running the scan, not 192.168.99.1, which shows a distance of 1 hop.
The scan report explicitly states 'Host is up (0.000047s latency)' for 192.168.99.7, confirming it is online and responding.
Concept tested: Interpreting nmap SYN and OS scan flags
Source: https://nmap.org/book/man-os-detection.html
Topics
Community Discussion
No community discussion yet for this question.