nerdexam
EC-Council

312-50V9 · Question #496

Which command line switch would be used in NMAP to perform operating system detection?

The correct answer is D. -O. The Nmap -O switch enables OS detection, allowing the scanner to fingerprint the operating system running on a target host.

Scanning Networks

Question

Which command line switch would be used in NMAP to perform operating system detection?

Options

  • A-OS
  • B-sO
  • C-sP
  • D-O

How the community answered

(43 responses)
  • A
    2% (1)
  • B
    7% (3)
  • C
    2% (1)
  • D
    88% (38)

Why each option

The Nmap -O switch enables OS detection, allowing the scanner to fingerprint the operating system running on a target host.

A-OS

-OS is not a valid Nmap command-line switch and will cause an error or be ignored by the Nmap engine.

B-sO

-sO performs an IP Protocol Scan to discover which IP protocols are active on a host, not OS fingerprinting.

C-sP

-sP performs a ping scan to identify live hosts on a subnet, not to detect or fingerprint operating systems.

D-OCorrect

The -O flag in Nmap activates OS detection by sending a series of specially crafted TCP and UDP probes to open and closed ports and analyzing responses against a fingerprint database. The TCP/IP stack behavior differences between operating systems allow Nmap to identify the OS type and version with reasonable accuracy. This information is critical during reconnaissance for selecting appropriate exploits or attack vectors.

Concept tested: Nmap OS detection switch usage

Source: https://nmap.org/book/man-os-detection.html

Topics

#NMAP#OS detection#-O flag#fingerprinting

Community Discussion

No community discussion yet for this question.

Full 312-50V9 Practice