A local firewall is configured to drop all incoming packets with the TCP SYN or URG flags set. Which of the following Nmap commands should a penetration tester use to scan the ports 22, 53, 80, and…

The correct answer is C. nmap -sA 10.4.7.18 -Pn -p 22,53,80,443. The given firewall configuration drops all incoming packets with the TCP SYN or URG flags set. Therefore, a SYN scan (-sS) or any scan involving SYN packets will be blocked. The ACK scan (- sA) is a suitable option in this case, as it sends TCP ACK packets instead of SYN…

Information Gathering and Vulnerability Scanning

Question

A local firewall is configured to drop all incoming packets with the TCP SYN or URG flags set. Which of the following Nmap commands should a penetration tester use to scan the ports 22, 53, 80, and 443 on the target machine and get the most reliable results?

Options

Anmap -sY 10.4.7.18 -Pn -p 22,53,80,443
Bnmap -sS 10.4.7.18 -Pn -p 22,53,80,443
Cnmap -sA 10.4.7.18 -Pn -p 22,53,80,443
Dnmap -sT 10.4.7.18 -Pn -p 22,53,80,443

How the community answered

(45 responses)

A
9% (4)
B
4% (2)
C
64% (29)
D
22% (10)

Explanation

The given firewall configuration drops all incoming packets with the TCP SYN or URG flags set. Therefore, a SYN scan (-sS) or any scan involving SYN packets will be blocked. The ACK scan (- sA) is a suitable option in this case, as it sends TCP ACK packets instead of SYN packets, allowing it to check the state of ports without being blocked by the firewall rule. This method will help determine whether the ports are filtered or unfiltered, providing reliable results in this

Topics

#Nmap#Port Scanning#Firewall Evasion#TCP Flags

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice