A penetration tester is performing initial intelligence gathering on some remote hosts prior to conducting a vulnerability scan. The tester runs the following command: nmap -p 192.168.1.1, 192.168.1.2, 192.168.1.3 -sV -o --max-rate 2 192.168.1.130 Which of the following BEST describes why multiple IP addresses are specified?
A) The network is subnetted as a/25 or greater, and the tester needed to access hosts on two different subnets.
B) The tester is trying to perform a more stealthy scan by including several bogus addresses.
C) The scanning machine has several interfaces to balance the scan request across at the specified rate.
D) A discovery scan is run on the first set of addresses, whereas a deeper, more aggressive scan is run against the latter host.

Question

Quizplus · Accepted Answer

The -p option in nmap allows the user to specify a range of IP addresses to scan. In this case, the tester is specifying three IP addresses: 192.168.1.1, 192.168.1.2, and 192.168.1.3. The -sV option tells nmap to perform a version scan, which will attempt to identify the services running on the specified hosts. The -o option tells nmap to output the results of the scan to a file. The --max-rate option tells nmap to limit the scan rate to 2 packets per second. The 192.168.1.130 address is not specified in the command, so it is not clear why it is mentioned in the question.

A Penetration Tester Is Performing Initial Intelligence Gathering on Some