Exam 312-50v13 topic 1 question 199 discussion

This technique is known as an SYN scan (also called half-open scan or stealth scan). Here’s how it works: The hacker sends an SYN (synchronize) packet to a target port. If the port is open, the target responds with an SYN/ACK (synchronize-acknowledge) packet. Instead of completing the handshake with an ACK packet, the hacker sends an RST (reset) packet to terminate the connection immediately. Goal of the SYN Scan: The attacker can identify open ports on the target system. Since the connection is never fully established, this scan is less likely to be logged compared to a full TCP connect scan. It’s a commonly used method in network reconnaissance before launching further attacks or penetration testing activities. Thus, the hacker is performing an SYN scan (Option A) to detect open ports while remaining stealthy.