ECSA v10: EC-Council Certified Security Analyst v10

By ECCouncil · Question Mode

QuestionQ1

VerifiedNetwork Penetration Testing Methodology – External

Peter, a disgruntled former employee of Zapmaky Solutions Ltd., is attempting to compromise the company website, http://zapmaky.com. He used the Nmap tool to port-scan the website and obtain information about open ports and their associated services. During the scan, he noticed that the firewall deployed by Zapmaky’s IT personnel was blocking some of his requests, and he wants to bypass it.

To evade the firewall, he wants to use the stealth-scanning technique—an incomplete TCP three-way-handshake method that can effectively bypass firewall rules and logging mechanisms.

Which of the following Nmap commands should Peter run to perform stealth scanning?

Explanation

Nmap TCP SYN scanning is the half-open, or stealth, scan because it does not complete the TCP three-way handshake. Nmap uses SYN scanning by default when raw-packet privileges are available unless another scan type is explicitly selected. The TCP connect option completes the connection, while the NULL and Xmas options select different scan techniques. -A enables additional detection features but does not replace the default TCP SYN scan type.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!