A penetration tester performed an Nmap scan that revealed the presence of a web server, a file server, and a database server. Which of the following Nmap scans should the tester use to potentially…

The correct answer is B. -sU. The -sU option in Nmap is used for UDP scans. A regular Nmap scan (-sS or -sT) primarily focuses on TCP ports, which might miss services running on UDP. Since some important services (e.g., DNS, SNMP, NTP, or certain custom applications) operate over UDP, a UDP scan can help…

Information Gathering and Vulnerability Scanning

Question

A penetration tester performed an Nmap scan that revealed the presence of a web server, a file server, and a database server. Which of the following Nmap scans should the tester use to potentially find more services that were undetected during the regular Nmap scan?

Options

A-sC
B-sU
C-sT
D-sS

How the community answered

(28 responses)

A
11% (3)
B
79% (22)
C
4% (1)
D
7% (2)

Explanation

The -sU option in Nmap is used for UDP scans. A regular Nmap scan (-sS or -sT) primarily focuses on TCP ports, which might miss services running on UDP. Since some important services (e.g., DNS, SNMP, NTP, or certain custom applications) operate over UDP, a UDP scan can help detect those.

Topics

#Nmap#Network Scanning#UDP Scan#Reconnaissance

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice