nerdexam
GIAC

GCIH · Question #293

As a professional hacker, you want to crack the security of secureserver.com. For this, in the information gathering step, you performed scanning with the help of nmap utility to retrieve as many…

The correct answer is D. nmap -sO. The nmap -sO switch performs IP protocol scanning, which iterates through IP protocol numbers to determine which protocols (TCP, UDP, ICMP, IGMP, etc.) are supported by the target host. This provides broad visibility into the services and protocols in use.

Reconnaissance, Scanning, and Enumeration

Question

As a professional hacker, you want to crack the security of secureserver.com. For this, in the information gathering step, you performed scanning with the help of nmap utility to retrieve as many different protocols as possible being used by the secureserver.com so that you could get the accurate knowledge about what services were being used by the secure server.com. Which of the following nmap switches have you used to accomplish the task?

Options

  • Anmap -vO
  • Bnmap -sS
  • Cnmap -sT
  • Dnmap -sO

How the community answered

(32 responses)
  • B
    6% (2)
  • C
    3% (1)
  • D
    91% (29)

Why each option

The nmap -sO switch performs IP protocol scanning, which iterates through IP protocol numbers to determine which protocols (TCP, UDP, ICMP, IGMP, etc.) are supported by the target host. This provides broad visibility into the services and protocols in use.

Anmap -vO

The nmap -vO switch combines verbose output (-v) with OS detection (-O), which identifies the operating system of the target but does not enumerate supported IP protocols.

Bnmap -sS

The nmap -sS switch performs a TCP SYN (half-open) stealth scan against TCP ports only, and does not scan for multiple IP-level protocols.

Cnmap -sT

The nmap -sT switch performs a full TCP connect scan against TCP ports only, completing the three-way handshake, and does not enumerate multiple IP protocols.

Dnmap -sOCorrect

The nmap -sO flag performs IP protocol scanning by sending raw IP packets with different protocol numbers in the IP header, then analyzing responses to determine which IP-level protocols are accepted by the target - giving the attacker a comprehensive map of available protocols and potential attack surfaces.

Concept tested: Nmap IP protocol scan switch -sO

Source: https://nmap.org/book/scan-methods-ip-protocol-scan.html

Topics

#nmap#IP protocol scan#service enumeration#-sO flag

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full GCIH Practice