You have conducted a network scan using Nmap and need the most comprehensive inventory of open ports on a server without placing too much load on the network. Which Nmap scan option should you use?
The -sT option performs a TCP connect scan, which establishes a full TCP connection. While it is comprehensive, it is slower and more likely to be detected. The -sS option performs a TCP SYN scan, which is faster and stealthier because it does not complete the TCP handshake. The UDP scan (-sU) is useful for finding open UDP ports but is slower and can be less reliable. The -sP option is a ping scan, which is primarily used for discovering hosts rather than open ports.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is a TCP SYN scan and how does it work?
Open an interactive chat with Bash
Why is it important to minimize load on the network when scanning?
Open an interactive chat with Bash
What other scanning options does Nmap provide, and when should I use them?