During an internal security assessment, a penetration tester needs to identify live hosts without performing a full port scan, to reduce network congestion. Which of the following Nmap options would be most appropriate for the tester to use to simply ping the hosts?
The '-sn' option in Nmap is used to perform a host discovery, which simply pings the hosts without actually scanning any ports. This is the correct answer as it minimizes the amount of traffic and reduces the chance of causing network disruption. The '-sV' option executes a service version detection, which is more intrusive and creates more traffic, going beyond the requirement of just discovering live hosts. The '-A' option enables OS detection, version detection, script scanning, and traceroute, which would not only produce more traffic but also try to scan and fingerprint hosts, which is not needed in this scenario. The '-p' option specifies the target ports to scan, which does not directly relate to host discovery without port scanning.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Nmap and what are its primary uses?
Open an interactive chat with Bash
What does the '-sn' option do in Nmap?
Open an interactive chat with Bash
Why is minimizing network traffic important during a security assessment?