Which scan type uses different arbitrary control bits via a --scanflags option?

• A. Fixed Bit Scans
• B. Custom Control Bit Scans
• C. Randomized Port Scans
• D. Credentialed Scans

Answer: (B)

The concept being tested is crafting packets with specific TCP flag bits to observe how a host or its filtering devices respond. The --scanflags option in Nmap lets you set arbitrary combinations of TCP control bits, so you can define your own custom probe patterns rather than sticking to standard scans. This enables Custom Control Bit Scans, where you deliberately choose the flag set to explore filter behavior or stealthiness. Fixed Bit Scans would imply using a fixed, non-custom bit pattern, which isn’t what --scanflags provides. Randomized Port Scans focus on varying port numbers, not the TCP flags. Credentialed Scans involve authenticating to the target, not manipulating TCP flags.