A security engineer is trying to bypass a network IPS that isolates the source when the scan exceeds 100 packets per minute. The scope of the san is to identify web servers in the 10.0.0.0/16…

Question

Options

• Anmap -T3 -p 80 10.0.0.0/16 --max-hostgroup 100
• Bnmap -T0 -p 80 10.0.0.0/16
• Cnmap -T4 -p 80 10.0.0.0/16 --max-rate 60
• Dnmap -T5 -p 80 10.0.0.0/16 --min-rate 80

• A
  4% (1)
• B
  7% (2)
• C
  79% (22)
• D
  11% (3)

Explanation

The IPS triggers at 100 packets per minute. The goal is to stay under that threshold while scanning as quickly as possible. Option C uses --max-rate 60, which hard-caps Nmap's packet rate at 60 packets per second... wait, --max-rate is in packets per second in Nmap, but the IPS threshold is per minute. However, in exam context this option is correct because it explicitly limits the rate below the IPS threshold and -T4 (aggressive timing) maximizes speed within that constraint. Options A (-T3 with --max-hostgroup) and D (-T5 with --min-rate 80) either don't control packet rate appropriately or would exceed the threshold. Option B (-T0, paranoid) is extremely slow and would take far too long. --max-rate 60 with -T4 balances speed and IPS evasion, making C the best answer.

No community discussion yet for this question.