LFCS · Question #412
Which of the following is NOT and valid scan technique with nmap?
The correct answer is E. RST. Nmap provides various port scanning techniques, but "RST" is not a named scan type; rather, a Reset (RST) flag is part of the TCP connection termination process observed during scans.
Question
Options
- AWindow
- BSYN
- CACK
- DConnect()
- ERST
How the community answered
(55 responses)- A2% (1)
- C2% (1)
- D5% (3)
- E91% (50)
Why each option
Nmap provides various port scanning techniques, but "RST" is not a named scan type; rather, a Reset (RST) flag is part of the TCP connection termination process observed during scans.
The Nmap Window scan (-sW) is a valid technique that exploits the TCP Window field to determine port status.
The Nmap SYN scan (-sS), also known as "stealth scan," is a valid and common technique that sends SYN packets and watches for SYN/ACK or RST responses.
The Nmap ACK scan (-sA) is a valid technique used to map firewall rulesets and determine if ports are filtered or unfiltered.
The Nmap Connect() scan (-sT) is a valid technique that performs a full TCP three-way handshake, making it less stealthy but highly reliable.
Nmap offers several named scan types such as SYN (stealth), Connect() (full connect), ACK, Window, and NULL/FIN/Xmas scans; however, "RST" is a TCP flag, not a dedicated Nmap scan technique.
Concept tested: Nmap scan techniques
Source: https://nmap.org/book/man-briefoptions.html
Topics
Community Discussion
No community discussion yet for this question.