GCIH · Question #13
Adam, a malicious hacker, wants to perform a reliable scan against a remote target. He is not concerned about being stealth at this point. Which of the following type of scans would be most accurate…
The correct answer is B. TCP Connect scan. TCP Connect scan completes the full three-way handshake, making it the most accurate and reliable scan method when stealth is not a concern.
Question
Adam, a malicious hacker, wants to perform a reliable scan against a remote target. He is not concerned about being stealth at this point. Which of the following type of scans would be most accurate and reliable?
Options
- AUDP sacn
- BTCP Connect scan
- CACK scan
- DFin scan
How the community answered
(30 responses)- A3% (1)
- B93% (28)
- C3% (1)
Why each option
TCP Connect scan completes the full three-way handshake, making it the most accurate and reliable scan method when stealth is not a concern.
UDP scans are inherently unreliable because UDP is connectionless and dropped packets produce no response, making it difficult to distinguish open ports from filtered ones.
TCP Connect scan completes the full TCP three-way handshake (SYN, SYN-ACK, ACK) with the target port, receiving a definitive open or closed response. Because the OS completes the connection, the result is highly reliable and accurate. It is easily detected and logged, but that is acceptable when reliability is the priority.
ACK scans do not determine whether a port is open or closed - they are used to map firewall rulesets by observing RST responses, not to confirm service availability.
FIN scans are stealth techniques that exploit TCP behavior in some OSes to infer port state, but they are unreliable because many modern systems do not respond as expected.
Concept tested: TCP port scan types and reliability
Source: https://nmap.org/book/man-port-scanning-techniques.html
Topics
Community Discussion
No community discussion yet for this question.