You work as a Security Administrator for Net Perfect Inc. The company has a Windows-based network. You want to use a scanning technique which works as a reconnaissance attack. The technique should…

The IDLE scan is a covert port scanning technique where an attacker spoofs packets via an idle zombie host to probe open services on a target system, making it a recognized reconnaissance attack method. It reveals which ports and services are running on the target without direct attribution to the attacker's machine. This combination of host targeting, service discovery, and stealth satisfies all the criteria described in the question.

Nmap is a network scanning tool that supports many scan types rather than being a single, discrete scanning technique itself.

A SYN scan sends a TCP SYN packet and waits for a response to enumerate ports, but it is a general half-open scan technique and not specifically classified as a stealth reconnaissance attack in the way IDLE scan is.

Host port scan is a generic descriptor of scanning activity rather than a specific named technique used in reconnaissance attacks.