A penetration tester is performing Nmap scans while trying to remain undetected. The penetration tester runs the following command: Which of the following scans is the penetration tester attempting?

The Nmap option -S <spoofed_ip_address> allows a penetration tester to spoof the source IP address of the scanning packets. This technique makes the target's logs record the spoofed IP as the source of the scan, potentially obscuring the actual scanner's identity and making detection and attribution more difficult.

A standard stealth scan typically refers to a SYN scan (-sS), which is designed to be stealthy by not completing the TCP handshake, but it does not inherently use a different source IP.

A SYN scan from a specific port (like DNS port 53, using nmap -g 53 or --source-port 53) changes the source port, not the source IP address.

Scanning using decoys (-D <decoy1>,<decoy2>,...<decoyN>) involves sending scan packets from multiple (real or spoofed) IP addresses alongside the actual scanner's IP, making it harder to determine the true origin, but it is distinct from spoofing a single source IP.