nerdexam
GIAC

GCIH · Question #585

The scanning algorithm in a port scanning tool is designed to continue sending SYN packets to targets rather than actively listening for a response from each one before proceeding. How does this desig

The correct answer is B. The time it takes to scan is reduced. Masscan is an example of a scan tool that is very fast, due to the approach that the scan tool separates the sending of SYN packets from waiting to receive the SYN/ACK packet(s). This separation allows the scan to initiate SYN packets to their target hosts very fast, not needing

Reconnaissance, Scanning, and Enumeration

Question

The scanning algorithm in a port scanning tool is designed to continue sending SYN packets to targets rather than actively listening for a response from each one before proceeding. How does this design decision impact its capabilities?

Options

  • AThe scan is more thorough than a regular port scan
  • BThe time it takes to scan is reduced
  • CThe source of the scan is obscured
  • DThe SYN/ACK responses can be received by multiple hosts

How the community answered

(30 responses)
  • A
    13% (4)
  • B
    80% (24)
  • C
    3% (1)
  • D
    3% (1)

Explanation

Masscan is an example of a scan tool that is very fast, due to the approach that the scan tool separates the sending of SYN packets from waiting to receive the SYN/ACK packet(s). This separation allows the scan to initiate SYN packets to their target hosts very fast, not needing to await a response for each SYN packet sent before proceeding.

Topics

#SYN scanning#asynchronous scanning#port scan optimization#scan speed

Community Discussion

No community discussion yet for this question.

Full GCIH Practice