A penetration tester wants to scan a target network without being detected by the client's IDS. Which of the following scans is MOST likely to avoid detection?

The correct answer is A. nmap -p0 -T0 -sS 192.168.1.10. The key flag here is -T0 (Paranoid timing), which is Nmap's slowest scan timing template. It sends packets extremely slowly-one probe approximately every 5 minutes-making it very difficult for IDS systems to correlate packets into a recognizable scan pattern. -sS performs a…

Information Gathering and Vulnerability Scanning

Question

Options

Anmap -p0 -T0 -sS 192.168.1.10
Bnmap -sA -sV --host-timeout 60 192.168.1.10
Cnmap -f --badsum 192.168.1.10
Dnmap -A -n 192.168.1.10

How the community answered

(47 responses)

A
77% (36)
B
4% (2)
C
13% (6)
D
6% (3)

Explanation

The key flag here is -T0 (Paranoid timing), which is Nmap's slowest scan timing template. It sends packets extremely slowly-one probe approximately every 5 minutes-making it very difficult for IDS systems to correlate packets into a recognizable scan pattern. -sS performs a stealthy SYN (half-open) scan. Option B uses -sV (version detection), which generates significant banner-grabbing traffic. Option C uses --badsum (which probes firewall behavior, not stealthy). Option D uses -A (aggressive mode), which is the least stealthy of all options.

Topics

#Nmap#IDS Evasion#Port Scanning#Stealth Scan

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice