Exam 312-50 topic 4 question 4 discussion

Actual exam question from ECCouncil's 312-50

Question #: 4
Topic #: 4

[All 312-50 Questions]

From the two screenshots below, which of the following is occurring?

A. 10.0.0.253 is performing an IP scan against 10.0.0.0/24, 10.0.0.252 is performing a port scan against 10.0.0.2.
B. 10.0.0.253 is performing an IP scan against 10.0.0.2, 10.0.0.252 is performing a port scan against 10.0.0.2.
C. 10.0.0.2 is performing an IP scan against 10.0.0.0/24, 10.0.0.252 is performing a port scan against 10.0.0.2.
D. 10.0.0.252 is performing an IP scan against 10.0.0.2, 10.0.0.252 is performing a port scan against 10.0.0.2.

Show Suggested Answer

Suggested Answer: A 🗳️

by goayxh at June 20, 2020, 5:44 p.m.

Comments

Submit Cancel

thinkinconcept

5 months, 1 week ago

None of this is correct, must be some kind of terminology issue here, let's dig in. .253 is nmap -sP .0/24 .252 is nmap -sO .2 Command: -sO is found here https://nmap.org/book/scan-methods-ip-protocol-scan.html Command: -sP is found here https://nmap.org/book/man-host-discovery.html So -sP is NOT a port scan and it's also not an IP protocol scan. But what is this "IP scan" mentioned in every answer? I would have to assume they mean "IP protocol scan" which is -sO. But none of the answers match correctly even with the terminology changed to the IP protocol scan. So then does "IP scan" mean any scan other than a port scan? If that's the case then none of the answers match either since 252 is NOT performing a port scan. SIGH, IDK...

upvoted 1 times

...