Which scan targets UDP ports?

Study for the SANS560 GIAC Penetration Tester (GPEN) Test. Study with flashcards and multiple choice questions, each question has hints and explanations. Get ready for your exam!

Multiple Choice

Which scan targets UDP ports?

Explanation:
To find UDP ports you need a UDP scan. UDP is connectionless, so there’s no TCP handshake to rely on. A UDP scan sends UDP packets to each target port and watches the replies. If a port is closed, the host often answers with an ICMP Port Unreachable message. If there’s a response, it can indicate an open service, and if no response is received, the port is typically interpreted as open|filtered. This approach is distinct from TCP-style probes, which rely on TCP flags to infer state; those probes do not target UDP ports. UDP scanning is inherently slower and more noisy because many networks rate-limit or block UDP and ICMP responses.

To find UDP ports you need a UDP scan. UDP is connectionless, so there’s no TCP handshake to rely on. A UDP scan sends UDP packets to each target port and watches the replies. If a port is closed, the host often answers with an ICMP Port Unreachable message. If there’s a response, it can indicate an open service, and if no response is received, the port is typically interpreted as open|filtered. This approach is distinct from TCP-style probes, which rely on TCP flags to infer state; those probes do not target UDP ports. UDP scanning is inherently slower and more noisy because many networks rate-limit or block UDP and ICMP responses.

Subscribe

Get the latest from Passetra

You can unsubscribe at any time. Read our privacy policy