A penetration tester wants to identify the most common TCP ports on 10.7.8.69. Which of the following is the best Nmap command for this task?

The correct answer is A. nmap 10.7.8.69 -sS -sA -sV -F. The -F (fast) flag is the key differentiator here - it instructs Nmap to scan only the top 100 most common ports as defined by Nmap's built-in port frequency database, directly matching the goal of identifying the 'most common TCP ports.' The -sS flag performs a stealthy SYN scan

Information Gathering and Vulnerability Scanning

Question

Options

Anmap 10.7.8.69 -sS -sA -sV -F
Bnmap 10.7.8.69 -sT -sA -p1-65535
Cnmap 10.7.8.69 -sC -sV -Pn
Dnmap 10.7.8.69 -sX -sU --top-ports

How the community answered

(25 responses)

A
80% (20)
B
4% (1)
C
4% (1)
D
12% (3)

Explanation

The -F (fast) flag is the key differentiator here - it instructs Nmap to scan only the top 100 most common ports as defined by Nmap's built-in port frequency database, directly matching the goal of identifying the 'most common TCP ports.' The -sS flag performs a stealthy SYN scan, and -sV adds service version detection. Choice B uses -p1-65535 to scan all 65535 ports, which is the opposite of focusing on the most common ones. Choice C uses -sC (default scripts) and -Pn (skip host discovery) but scans Nmap's default 1000 ports - not specifically the 'most common' in the compact sense -F provides. Choice D uses -sX (Xmas scan) and -sU (UDP), neither of which is the right approach for identifying common TCP ports quickly.

Topics

#Nmap#Port Scanning#TCP Ports#Enumeration

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice