Which Nmap flag performs a SYN scan (half-open scan), the default scan type for privileged users?
- A.A. -sT
- B.B. -sS
- C.C. -sU
- D.D. -sP
Why B is correct
-sS performs a SYN scan that sends a SYN packet and waits for a SYN-ACK (open) or RST (closed). It never completes the TCP handshake, making it stealthier and faster than a full connect scan (-sT). -sU scans UDP ports, and -sP is a ping scan (now -sn in modern Nmap).
Know someone studying for Security Fundamentals? Send them this one.