PT0-002 Question #161: Real Exam Question with Answer & Explanation

The correct answer is A: nmap -sn 10.12.1.0/24. To quickly discover live hosts on a subnet, a penetration tester should use the Nmap ping scan command. This type of scan identifies active devices without performing port scans, making it fast and efficient for host discovery.

Reconnaissance and enumeration

Question

A penetration tester is attempting to discover live hosts on a subnet quickly. Which of the following commands will perform a ping scan?

Options

Anmap -sn 10.12.1.0/24
Bnmap -sV -A 10.12.1.0/24
Dnmap -sT -p- 10.12.1.0/24

Explanation

To quickly discover live hosts on a subnet, a penetration tester should use the Nmap ping scan command. This type of scan identifies active devices without performing port scans, making it fast and efficient for host discovery.

Common mistakes.

B. The nmap -sV -A command performs version detection (-sV) and aggressive scanning (-A), including OS detection, version detection, script scanning, and traceroute, which is a comprehensive and time-consuming scan, not a quick ping scan for host discovery.
D. The nmap -sT -p- command performs a full TCP connect scan (-sT) across all 65535 ports (-p-), which is a very intrusive and time-consuming port scan, not a quick ping scan for host discovery.

Concept tested. Nmap host discovery ping scan

Reference. https://nmap.org/book/man-host-discovery.html

Topics

#nmap#host discovery#ping scan#reconnaissance

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice Browse All PT0-002 Questions