Exam 312-49 topic 1 question 141 discussion

since most of the port did not send a response I think the most appropriate answer should be D. https://nmap.org/book/scan-methods-null-fin-xmas-scan.html Table 5.4. How Nmap interprets responses to a NULL, FIN, or Xmas scan probe Probe Response Assigned State No response received (even after retransmissions) open|filtered

XMAS scans send packets with all of the flags — including FIN — expecting no response, which would mean the port is open. If the port is closed, a RST response would be received.

No response at all if the port is open.

A & D. refer to https://nmap.org/book/scan-methods-null-fin-xmas-scan.html

Refer to this: https://linuxhint.com/nmap_xmas_scan/

Answer shd be D