You have conducted a network scan using Nmap and need the most comprehensive inventory of open ports on a server without placing too much load on the network. Which Nmap scan option should you use?
The -sT option performs a TCP connect scan, which establishes a full TCP connection. While it is comprehensive, it is slower and more likely to be detected. The -sS option performs a TCP SYN scan, which is faster and stealthier because it does not complete the TCP handshake. The UDP scan (-sU) is useful for finding open UDP ports but is slower and can be less reliable. The -sP option is a ping scan, which is primarily used for discovering hosts rather than open ports.
Learn More
AI Generated Content may display inaccurate information, always double-check anything important.
What is a TCP SYN scan and how does it work?
Why is it important to minimize load on the network when scanning?
What other scanning options does Nmap provide, and when should I use them?