Question

question 6

which nmap scan type is less stealthy due to its use of the operating system to attempt a full tcp connection?

a udp scans (-su)
b tcp connect (-st)
c tcp syn (-ss)
d port range (-p)

Explanation:

Analyze the question requirements

The question asks for the Nmap scan type that is less stealthy because it uses the operating system's network stack to establish a full TCP connection.

Evaluate the options

• UDP scans (-sU): Used for scanning UDP ports, not for establishing TCP connections.
• TCP connect (-sT): This scan type uses the system call connect() to establish a full three-way handshake (SYN, SYN-ACK, ACK) with the target port. Because it completes the connection, the target operating system logs the connection, making it highly visible and less stealthy.
• TCP SYN (-sS): Also known as half-open or stealth scanning. It sends a SYN packet and waits for a SYN-ACK, but does not complete the three-way handshake with an ACK, avoiding standard connection logging.
• Port range (-p): This is a parameter used to specify which ports to scan, not a scan type itself.

Determine the correct option

The TCP connect scan (-sT) is the less stealthy scan type because it completes the full TCP connection.

Answer:

• A UDP scans (-sU)
• B TCP connect (-sT) (Correct answer)
• C TCP SYN (-sS)
• D Port range (-p)