CompTIA
PT0-001 · Question #68
A penetration tester is performing initial intelligence gathering on some remote hosts prior to conducting a vulnerability scan. The tester runs the following command: nmap -D 192.168.1.1…
The correct answer is B. The tester is trying to perform a more stealthy scan by including several bogus addresses. -D <decoy1,decoy2[,ME],...>: Cloak a scan with decoys
Reconnaissance and enumeration
Question
A penetration tester is performing initial intelligence gathering on some remote hosts prior to conducting a vulnerability scan. The tester runs the following command:
nmap -D 192.168.1.1, 192.168.1.2, 192.168.1.3 -sV -o --max-rate 2 192.168.1.130 Which of the following BEST describes why multiple IP addresses are specified?
Options
- AThe network is submitted as a /25 or greater and the tester needed to access hosts on two
- BThe tester is trying to perform a more stealthy scan by including several bogus addresses
- CThe scanning machine has several interfaces to balance the scan request across at the specified
- DA discovery scan is run on the first set of addresses, whereas a deeper, more aggressive scan is
How the community answered
(15 responses)- A7% (1)
- B73% (11)
- C13% (2)
- D7% (1)
Explanation
-D <decoy1,decoy2[,ME],...>: Cloak a scan with decoys
Topics
#Nmap decoy scan#stealth scanning#-D flag#reconnaissance
Community Discussion
No community discussion yet for this question.