Why is IPv6 support useful for NMAP?

• A. IPv6 is slower
• B. Many firewalls/IPSs do not filter IPv6 traffic
• C. IPv6 uses the same rules as IPv4
• D. IPv6 only works on Windows

Answer: (B)

Scanning IPv6 addresses is essential because modern networks often rely on IPv6 or are dual-stacked, meaning hosts and services may be reachable only over IPv6 or alongside IPv4. If you don’t scan IPv6, you can miss hosts, open ports, and exposed services that exist on the IPv6 plane, leaving gaps in your assessment. In many environments, security devices like firewalls and IPSs have historically been focused on IPv4 and may not filter or inspect IPv6 traffic with the same rigor, so IPv6 traffic can bypass some controls and still be reachable. Enabling IPv6 support in NMAP allows you to discover and enumerate those targets just as you would on IPv4, providing a more complete picture of the network’s exposure. The other statements aren’t accurate: IPv6 isn’t inherently slower, it doesn’t follow the same exact filtering rules as IPv4, and IPv6 isn’t restricted to Windows.