A penetration tester has been given an assignment to attack - CompTIA Pentest+ PT0-003

Question

A penetration tester has been given an assignment to attack a series of targets in the 192.168.1.0/24 range, triggering as few alarms and countermeasures as possible.
Which of the following Nmap scan syntaxes would BEST accomplish this objective?

Answers
  1. correct
Explanation

Correct Answer: D. nmap -sS -O 192.168.1.2/24 -T1

The goal is to scan a network stealthily, minimizing alarms and avoiding detection by IDS/IPS. The correct answer must use a low-noise scanning technique with a slow timing template to evade detection.

nmap -sS -O 192.168.1.2/24 -T1

  • -sS → SYN scan (Stealth Scan)
    • Does not complete the TCP handshake, reducing logs on target systems.
    • Faster than a full TCP connect scan (-sT) and less likely to trigger alarms.
  • -O → OS Detection
    • Attempts to fingerprint the target system’s OS.
  • 192.168.1.2/24 → Scans the entire subnet (192.168.1.0 - 192.168.1.255)
  • -T1 → Very slow timing template (Paranoid Mode)
    • Minimizes detection risk by spreading out scan packets over time.
    • Avoids setting off Intrusion Detection Systems (IDS) that detect fast/multiple connection attempts.

Why the Other Options Are Incorrect:

nmap -sT -vvv -O 192.168.1.2/24 -PO

  • -sT → TCP Connect Scan

    • Completes the TCP handshake, making it highly detectable by firewalls and IDS.
  • -vvv → Very verbose output (good for user, but not for stealth).
  • -PO → Disables ping checks, which could make scanning less efficient but does not help stealth much.
    Fails stealth requirement due to -sT.

nmap -sV 192.168.1.2/24 -PO

  • -sV → Version detection

    • Sends probes to services, making it easier to detect.
  • -PO → Disables ICMP ping, but this alone does not make scanning stealthy.
    Fails because -sV is aggressive and not stealthy.

nmap -sA -v -O 192.168.1.2/24

  • -sA → ACK Scan

    • Used for firewall rule analysis, NOT for finding open ports.
    • Does NOT determine if a port is open or closed, making it ineffective for initial recon.
       Fails because -sA is not useful for discovering targets.

No Payment Cards Needed

Related Courses

Discover a range of courses designed to provide you with the knowledge and skills needed to excel in your chosen field.

a prepsaret exam featured image
CompTIA Prep

220-1201 - CompTIA A+ Exam Core 1

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

220-1202 - CompTIA A+ Exam Core 2

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA SecurityX CAS-005

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA Cloud Essentials+ CLO-002

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA Network+ N10-009

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA Security+ SY0-701

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA Data + DA0-001

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA Linux+ XK0-005

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA CySA+ CSO-003

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA DataSys+ DS0-001

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA Tech+ FC0-U71

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA Cloud+ CV0-004

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA Server+ SK0-005

Start Course Prep

Easy way to pass your test within a week with prepsaret

You don’t need one month to study and pass your test.
With Prepsaret, it takes you a few days to grasp all the concepts needed to pass your exams

View Courses Offered