Exam PT0-002 topic 1 question 346 discussion

Actual exam question from CompTIA's PT0-002

Question #: 346
Topic #: 1

During a reconnaissance exercise, a penetration tester runs the following Nmap command:

nmap -sT -sV -T2 -p 1-65535 domain.com

After watching the scan run for more than two hours, the tester wants to optimize the full scan. Which of the following is the best way to speed up the scan?

A. Scan fewer ports list.
B. Scan via UDP to improve speed.
C. Change -sT to -sS.
D. Keep the scan timing.

Show Suggested Answer

Suggested Answer: C 🗳️

by JRocmon at Sept. 19, 2024, 7:28 p.m.

Comments

Submit Cancel

fecffa8

5 months, 3 weeks ago

Selected Answer: C

Changing from a TCP connect scan (-sT) to a SYN scan (-sS) is a highly effective way to speed up the scan. The SYN scan is faster because it only sends SYN packets and waits for responses without completing the TCP handshake, reducing the overall time taken for the scan. This method is widely used in penetration testing for its efficiency and speed.

upvoted 2 times

...

JRocmon

7 months, 2 weeks ago

Selected Answer: C

I believe the answer is "C". -sS will change the scan to a SYN scan which are the most popular scan option because they are quick, stealthy, and work against any compliant TCP stack.

upvoted 2 times

...

Exam PT0-002 All Questions

View all questions & answers for the PT0-002 exam

Exam PT0-002 topic 1 question 346 discussion

Comments

fecffa8

JRocmon

SY0-701