Why would a penetration tester use the nmap -sF command?

Last Updated: Oct 11, 2023
IT Exam Items Repository › Category: Ethical Hacker › Why would a penetration tester use the nmap -sF command?

Why would a penetration tester use the nmap -sF command?

  • when a TCP SYN scan is detected by a network filter or firewall
  • when the tester wants to conclude the scan
  • when a TCP SYN scan reports more than one open port
  • when the tester needs to time stamp the scan

Explanation: When a network filter or firewall detects a TCP SYN scan, a TCP FIN scan will send a FIN packet to a target port. TCP FIN packets are typically allowed through firewalls and filters.

Related exam: 3.5.3 Quiz - Information Gathering and Vulnerability Scanning Answers

About The Author

ITExamAnswers Editorial Team

The ITExamAnswers Editorial Team is a dedicated group of certified IT professionals and network engineers. We rigorously review, verify, and update all exam materials to ensure you receive the most accurate and reliable resources for your certification journey.