Skillset can help you prepare! Sign up for your free Skillset account and take the first steps towards your certification.
Which of these Nmap switches would you use for performing an idle scan?
-iS
-Id
-sT
-sI
The switch '-sI' is used to perform an idle scan using a zombie host. This advanced scan method allows for a truly blind TCP port scan of the target (meaning no packets are sent to the target from your real IP address). Instead, a unique side-channel attack exploits predictable IP fragmentation ID sequence generation on the zombie host to glean information about the open ports on the target. IDS systems will display the scan as coming from the zombie machine you specify (which must be up and meet certain criteria). https://nmap.org/book/man-port-scanning-techniques.html
Train with Skillset and pass your certification exam. Faster. Guaranteed.
Study thousands of practice questions that organized by skills and ranked by difficulty.
Create a tailored training plan based on the knowledge you already possess.
Know when you’re ready for the high-stakes exam. Have the confidence that you will pass on your first attempt.