LFCS · Question #377
The command 'nmap sS O 10.142.232.10' produces the following output: PORT STATE SERVICE 631/tcp open ipp 3306/tcp open mysql Which of these statements are true? (Select TWO correct answers)
The correct answer is B. The scan was executed by the root user. D. A stealth SYN scan was launched. The Nmap command nmap -sS -O 10.142.232.10 indicates a stealth SYN scan and OS detection, with the -sS flag specifically requiring root privileges for raw packet operations.
Question
Options
- AA simple scan was launched.
- BThe scan was executed by the root user.
- COutput will be sent to a file instead of stdout.
- DA stealth SYN scan was launched.
- EThere are no other services running on this machine.
How the community answered
(17 responses)- A6% (1)
- B71% (12)
- C6% (1)
- E18% (3)
Why each option
The Nmap command `nmap -sS -O 10.142.232.10` indicates a stealth SYN scan and OS detection, with the `-sS` flag specifically requiring root privileges for raw packet operations.
A 'simple scan' is not a standard Nmap terminology; the scan launched (`-sS`) is a specific type of port scan.
The `-sS` (SYN scan) option requires Nmap to craft raw Ethernet frames and perform low-level packet manipulation, which typically necessitates root privileges on Unix-like operating systems.
The command provided does not include any output redirection options (like `-oN`, `-oX`, or `>`), so the output would be displayed on the console (stdout).
The `-sS` option explicitly instructs Nmap to perform a SYN scan, also known as a 'stealth scan' or 'half-open scan,' because it doesn't complete the full TCP three-way handshake if the port is open.
The output only shows *open* ports detected by the scan and does not imply that no other services are running, as Nmap might not detect filtered ports or services on other ports not scanned.
Concept tested: Nmap scan types and permissions
Source: https://nmap.org/book/man-port-scanning-techniques.html
Topics
Community Discussion
No community discussion yet for this question.