PT0-002 · Question #221
A penetration tester is examining a Class C network to identify active systems quickly. Which of the following commands should the penetration tester use?
The correct answer is B. nmap -sn 192.168.0.1-254. To quickly identify active systems within a Class C network, the Nmap command nmap -sn 192.168.0.1-254 efficiently performs a ping scan across the expected host range.
Question
A penetration tester is examining a Class C network to identify active systems quickly. Which of the following commands should the penetration tester use?
Options
- Anmap -sn 192.168.0.1/16
- Bnmap -sn 192.168.0.1-254
- Cnmap -sn 192.168.0.1 192.168.0.1.254
- Dnmap -sN 192.168.0.0/24
How the community answered
(48 responses)- A15% (7)
- B73% (35)
- C8% (4)
- D4% (2)
Why each option
To quickly identify active systems within a Class C network, the Nmap command `nmap -sn 192.168.0.1-254` efficiently performs a ping scan across the expected host range.
`192.168.0.1/16` specifies a Class B network, which is much larger than the requested Class C network, leading to a much longer and broader scan.
The `nmap -sn` command performs a ping scan (host discovery) to quickly identify active hosts without performing a full port scan. The `192.168.0.1-254` range accurately specifies the common usable host IP addresses within a typical Class C network, ensuring all potential active systems are targeted.
`192.168.0.1.254` is not a valid IP address or range format for Nmap.
`nmap -sN` performs a Null scan, which is a type of port scan, not a host discovery ping scan. The `-sn` option is required for quick host discovery.
Concept tested: Nmap host discovery for a subnet
Source: https://nmap.org/book/man-host-discovery.html
Topics
Community Discussion
No community discussion yet for this question.