A penetration tester has been given an assignment to attack a series of targets in the 192.168.1.0/24 range, triggering as few alarms and countermeasures as possible.
Which of the following Nmap scan syntaxes would BEST accomplish this objective?
Correct Answer: D. nmap -sS -O 192.168.1.2/24 -T1
The goal is to scan a network stealthily, minimizing alarms and avoiding detection by IDS/IPS. The correct answer must use a low-noise scanning technique with a slow timing template to evade detection.
nmap -sS -O 192.168.1.2/24 -T1-sS → SYN scan (Stealth Scan)
-sT) and less likely to trigger alarms.-O → OS Detection
192.168.1.2/24 → Scans the entire subnet (192.168.1.0 - 192.168.1.255)-T1 → Very slow timing template (Paranoid Mode)
Why the Other Options Are Incorrect:
nmap -sT -vvv -O 192.168.1.2/24 -PO
-sT → TCP Connect Scan
-vvv → Very verbose output (good for user, but not for stealth).-PO → Disables ping checks, which could make scanning less efficient but does not help stealth much.-sT.nmap -sV 192.168.1.2/24 -PO
-sV → Version detection
-PO → Disables ICMP ping, but this alone does not make scanning stealthy.-sV is aggressive and not stealthy.nmap -sA -v -O 192.168.1.2/24
-sA → ACK Scan
-sA is not useful for discovering targets.No Payment Cards Needed
Discover a range of courses designed to provide you with the knowledge and skills needed to excel in your chosen field.
You don’t need one month to study and pass your test.
With Prepsaret, it takes you a few days to grasp all the concepts needed to pass your exams