PT0-001 · Question #150
A penetration tester has been asked to conduct OS fingering with Nmap using a company- provided text file that contains a list of IP addresses. Which of the following are needed to conduct this…
The correct answer is A. -O B. -iL. Nmap OS fingerprinting from a target list requires -O to enable OS detection and -iL to read IP addresses from the provided text file.
Question
A penetration tester has been asked to conduct OS fingering with Nmap using a company- provided text file that contains a list of IP addresses. Which of the following are needed to conduct this scan? (Choose two.)
Options
- A-O
- B-iL
- C-sV
- D-sS
- E-oN
- F-oX
How the community answered
(35 responses)- A86% (30)
- C3% (1)
- E6% (2)
- F6% (2)
Why each option
Nmap OS fingerprinting from a target list requires -O to enable OS detection and -iL to read IP addresses from the provided text file.
The -O flag activates Nmap's OS detection engine, which sends specialized probes to targets and compares TCP/IP stack responses against an internal fingerprint database to identify the operating system.
The -iL flag instructs Nmap to read target hosts from a specified input file, enabling bulk scanning of all IP addresses in the company-provided text file without entering each one manually.
-sV performs service and version detection on open ports, which identifies application software rather than the underlying operating system and is not required for OS fingerprinting.
-sS performs a TCP SYN stealth scan for port discovery purposes only and does not contribute to identifying the operating system of the target.
-oN is an output flag that saves scan results to a normal text file and has no effect on how the scan is conducted or which targets are scanned.
-oX is an output flag that saves scan results in XML format and similarly has no bearing on the scanning methodology or input source.
Concept tested: Nmap OS fingerprinting flags and input file option
Source: https://nmap.org/book/man.html
Topics
Community Discussion
No community discussion yet for this question.