PT0-002 Question #221: Real Exam Question with Answer & Explanation

The correct answer is B: nmap -sn 192.168.0.1-254. To quickly identify active systems within a Class C network, the Nmap command nmap -sn 192.168.0.1-254 efficiently performs a ping scan across the expected host range.

Reconnaissance and enumeration

Question

A penetration tester is examining a Class C network to identify active systems quickly. Which of the following commands should the penetration tester use?

Options

Anmap -sn 192.168.0.1/16
Bnmap -sn 192.168.0.1-254
Cnmap -sn 192.168.0.1 192.168.0.1.254
Dnmap -sN 192.168.0.0/24

Explanation

To quickly identify active systems within a Class C network, the Nmap command nmap -sn 192.168.0.1-254 efficiently performs a ping scan across the expected host range.

Common mistakes.

A. 192.168.0.1/16 specifies a Class B network, which is much larger than the requested Class C network, leading to a much longer and broader scan.
C. 192.168.0.1.254 is not a valid IP address or range format for Nmap.
D. nmap -sN performs a Null scan, which is a type of port scan, not a host discovery ping scan. The -sn option is required for quick host discovery.

Concept tested. Nmap host discovery for a subnet

Reference. https://nmap.org/book/man-host-discovery.html

Topics

#Nmap#Host Discovery#Network Scanning#Ping Scan

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice Browse All PT0-002 Questions