GCIH: GIAC Certified Incident HandlerDemo

By GIAC · Question Mode

QuestionQ620

Scanning and Mapping

What is the typical response from active hosts to discovery packets sent in a default Nmap sweep?

  • A SYN-ACK packet
  • B FIN packet
  • C SYN packet
  • D ICMP Timestamp request
Explanation

Default Nmap host discovery includes a TCP SYN probe to port 443. An active host with that port open replies with a TCP SYN-ACK, which demonstrates that the host is reachable. Nmap’s default probes themselves include SYN packets and ICMP Timestamp requests; they are not the response.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!