312-50V9 · Question #296
Which of the following Nmap commands will produce the following output? Output: Nmap scan report for 192.168.1.1 Host is up (0.00042s latency). Not shown: 65530 open|filtered ports, 65529 filtered…
The correct answer is D. nmap -sS -sU -Pn -p 1-65535 192.168.1.1. The scan output displays both TCP and UDP open ports across the full 1-65535 port range, which requires combining a TCP SYN scan with a UDP scan and specifying all ports explicitly.
Question
Which of the following Nmap commands will produce the following output? Output:
Nmap scan report for 192.168.1.1 Host is up (0.00042s latency). Not shown: 65530 open|filtered ports, 65529 filtered ports PORT STATE SERVICE 111/tcp open rpcbind 999/tcp open garcon 1017/tcp open unknown 1021/tcp open exp1 1023/tcp open netvenuechat 2049/tcp open nfs 17501/tcp open unknown 111/udp open rpcbind 123/udp open ntp 137/udp open netbios-ns 2049/udp open nfs 5353/udp open zeroconf 17501/udp open|filtered unknown 51857/udp open|filtered unknown 54358/udp open|filtered unknown 56228/udp open|filtered unknown 57598/udp open|filtered unknown 59488/udp open|filtered unknown 60027/udp open|filtered unknown
Options
- Anmap -sN -Ps -T4 192.168.1.1
- Bnmap -sT -sX -Pn -p 1-65535 192.168.1.1
- Cnmap -sS -Pn 192.168.1.1
- Dnmap -sS -sU -Pn -p 1-65535 192.168.1.1
How the community answered
(19 responses)- A5% (1)
- B5% (1)
- C11% (2)
- D79% (15)
Why each option
The scan output displays both TCP and UDP open ports across the full 1-65535 port range, which requires combining a TCP SYN scan with a UDP scan and specifying all ports explicitly.
-sN performs a TCP Null scan and -Ps is a ping sweep flag; this combination cannot produce UDP scan results.
Combining -sT (TCP connect) and -sX (Xmas scan) runs two competing TCP scan types and still produces no UDP results, making this output impossible.
Without -p 1-65535 this command only scans the default 1000 ports and has no -sU flag, so it cannot produce the high-port UDP results shown.
The -sS flag performs a stealthy TCP SYN scan and -sU simultaneously runs a UDP scan, which is why the output contains both 'tcp' and 'udp' port entries. The -p 1-65535 flag is confirmed by the presence of high-numbered ports such as 17501 and 60027 in the results. The -Pn flag skips host discovery pings, consistent with the output proceeding directly to port results.
Concept tested: Nmap combined TCP SYN and UDP full-port scanning
Source: https://nmap.org/book/man-port-scanning-techniques.html
Topics
Community Discussion
No community discussion yet for this question.