ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 323 - PT0-002 discussion

Report
Export

A security engineer is trying to bypass a network IPS that isolates the source when the scan exceeds 100 packets per minute. The scope of the scan is to identify web servers in the 10.0.0.0/16 subnet.

Which of the following commands should the engineer use to achieve the objective in the least amount of time?

A.
nmap -T3 -p 80 10.0.0.0/16 -- max-hostgroup 100
Answers
A.
nmap -T3 -p 80 10.0.0.0/16 -- max-hostgroup 100
B.
nmap -TO -p 80 10.0.0.0/16
Answers
B.
nmap -TO -p 80 10.0.0.0/16
C.
nmap -T4 -p 80 10.0.0.0/16 -- max-rate 60
Answers
C.
nmap -T4 -p 80 10.0.0.0/16 -- max-rate 60
D.
nmap -T5 -p 80 10.0.0.0/16 -- min-rate 80
Answers
D.
nmap -T5 -p 80 10.0.0.0/16 -- min-rate 80
Suggested answer: C

Explanation:

The nmap -T4 -p 80 10.0.0.0/16 -- max-rate 60 command is used to scan the 10.0.0.0/16 subnet for web servers (port 80) at a maximum rate of 60 packets per minute. The -T4 option sets the timing template to ''aggressive'', which speeds up the scan. The --max-rate option limits the number of packets sent per second, helping to bypass the network IPS that isolates the source when the scan exceeds 100 packets per minute12.

Reference: Nmap commands

asked 02/10/2024
Raymond Chan
32 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first