Which of the following nmap command parameters is used for TCP SYN port scanning?

The correct answer is D. -sS. The -sS flag in nmap performs a TCP SYN scan, also known as a 'half-open' or 'stealth' scan. It sends a SYN packet and waits for a response: a SYN/ACK indicates an open port, while a RST indicates a closed port. The connection is never fully completed (no ACK is sent), making…

Reconnaissance, Scanning, and Enumeration

Question

Options

A-sF
B-sU
C-sX
D-sS

How the community answered

(44 responses)

A
5% (2)
B
2% (1)
C
2% (1)
D
91% (40)

Explanation

The -sS flag in nmap performs a TCP SYN scan, also known as a 'half-open' or 'stealth' scan. It sends a SYN packet and waits for a response: a SYN/ACK indicates an open port, while a RST indicates a closed port. The connection is never fully completed (no ACK is sent), making it harder to detect in logs. The other options serve different purposes: -sF performs a FIN scan (sends FIN packets to probe ports), -sU performs a UDP scan, and -sX performs an Xmas scan (sets FIN, PSH, and URG flags simultaneously).

Topics

#nmap#TCP SYN scan#port scanning#-sS flag

Community Discussion

No community discussion yet for this question.

Full GCIH Practice