Certified Ethical Hacker (CEH v12) — Question 93

Techno Security Inc. recently hired John as a penetration tester. He was tasked with identifying open ports in the target network and determining whether the ports are online and any firewall rule sets are encountered.
John decided to perform a TCP SYN ping scan on the target network.
Which of the following Nmap commands must John use to perform the TCP SYN ping scan?

Answer options

• A. nmap -sn -PO < target IP address >
• B. nmap -sn -PS < target IP address >
• C. nmap -sn -PA < target IP address >
• D. nmap -sn -PP < target IP address >

Correct answer: B

Explanation

The correct command for performing a TCP SYN ping scan in Nmap is 'nmap -sn -PS < target IP address >', which sends SYN packets to determine if the ports are open. The other options use different types of pings, such as ICMP echo requests (A), TCP ACK (C), and timestamp requests (D), which do not specifically perform a TCP SYN ping scan.