What is the primary goal of NMAP's network probe/sweep feature?

Study for the SANS560 GIAC Penetration Tester (GPEN) Test. Study with flashcards and multiple choice questions, each question has hints and explanations. Get ready for your exam!

Multiple Choice

What is the primary goal of NMAP's network probe/sweep feature?

Explanation:
Identify live hosts is the primary goal of NMAP’s host discovery sweep. It works by sending various probes (such as ICMP echo requests, TCP probes, and ARP requests) and using the responses to determine which devices on the network are up and reachable. This step narrows the target set so you can focus subsequent scans on machines that actually respond. Port scanning, service detection, and OS fingerprinting rely on having live hosts to scan, so they come after establishing which hosts are reachable. If a host doesn’t respond, it may be down, blocked by firewalls, or filtered, which is why the sweep centers on who is alive rather than what services or OS they expose.

Identify live hosts is the primary goal of NMAP’s host discovery sweep. It works by sending various probes (such as ICMP echo requests, TCP probes, and ARP requests) and using the responses to determine which devices on the network are up and reachable. This step narrows the target set so you can focus subsequent scans on machines that actually respond. Port scanning, service detection, and OS fingerprinting rely on having live hosts to scan, so they come after establishing which hosts are reachable. If a host doesn’t respond, it may be down, blocked by firewalls, or filtered, which is why the sweep centers on who is alive rather than what services or OS they expose.

Subscribe

Get the latest from Passetra

You can unsubscribe at any time. Read our privacy policy