GPEN · Question #265
Which of the following nmap switches is used to perform ICMP netmask scanning?
The correct answer is A. -PM. The nmap -PM switch sends ICMP address mask requests (type 17) to probe live hosts, distinct from other ping types.
Question
Which of the following nmap switches is used to perform ICMP netmask scanning?
Options
- A-PM
- B-PB
- C-PI
- D-PS
How the community answered
(35 responses)- A74% (26)
- B6% (2)
- C17% (6)
- D3% (1)
Why each option
The nmap -PM switch sends ICMP address mask requests (type 17) to probe live hosts, distinct from other ping types.
The -PM flag in nmap triggers an ICMP netmask (address mask) scan by sending ICMP type 17 address mask request packets. This is used for host discovery when standard echo requests are blocked, as some firewalls allow mask requests through. It is a specific host discovery technique separate from echo-based ICMP scanning.
-PB performs a combined TCP and ICMP ping scan, not an ICMP netmask scan.
-PI sends ICMP echo (ping) requests for host discovery, which is a standard ICMP echo scan, not a netmask scan.
-PS performs a TCP SYN ping scan targeting specified ports, and does not use ICMP at all.
Concept tested: nmap ICMP address mask host discovery switch
Source: https://nmap.org/book/man-host-discovery.html
Topics
Community Discussion
No community discussion yet for this question.