nerdexam
GIAC

GCIH · Question #13

Adam, a malicious hacker, wants to perform a reliable scan against a remote target. He is not concerned about being stealth at this point. Which of the following type of scans would be most accurate…

The correct answer is B. TCP Connect scan. TCP Connect scan completes the full three-way handshake, making it the most accurate and reliable scan method when stealth is not a concern.

Reconnaissance, Scanning, and Enumeration

Question

Adam, a malicious hacker, wants to perform a reliable scan against a remote target. He is not concerned about being stealth at this point. Which of the following type of scans would be most accurate and reliable?

Options

  • AUDP sacn
  • BTCP Connect scan
  • CACK scan
  • DFin scan

How the community answered

(30 responses)
  • A
    3% (1)
  • B
    93% (28)
  • C
    3% (1)

Why each option

TCP Connect scan completes the full three-way handshake, making it the most accurate and reliable scan method when stealth is not a concern.

AUDP sacn

UDP scans are inherently unreliable because UDP is connectionless and dropped packets produce no response, making it difficult to distinguish open ports from filtered ones.

BTCP Connect scanCorrect

TCP Connect scan completes the full TCP three-way handshake (SYN, SYN-ACK, ACK) with the target port, receiving a definitive open or closed response. Because the OS completes the connection, the result is highly reliable and accurate. It is easily detected and logged, but that is acceptable when reliability is the priority.

CACK scan

ACK scans do not determine whether a port is open or closed - they are used to map firewall rulesets by observing RST responses, not to confirm service availability.

DFin scan

FIN scans are stealth techniques that exploit TCP behavior in some OSes to infer port state, but they are unreliable because many modern systems do not respond as expected.

Concept tested: TCP port scan types and reliability

Source: https://nmap.org/book/man-port-scanning-techniques.html

Topics

#TCP connect scan#port scanning#scan reliability#network reconnaissance

Community Discussion

No community discussion yet for this question.

Full GCIH Practice