Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) · Cisco
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Nmap -sP 192.168.1.0/24 This command will perform a simple ping scan to identify hosts that are alive in the specified IP range without performing a detailed port scan, which is less likely to trigger intrusive alerts on IDS devices.
The best answer is B. The engineer needs to discover alive hosts within the 192.168.1.0/24 range without triggering intrusive portscan alerts on the IDS device using Nmap. The --sP option in Nmap sends an ICMP echo request, TCP SYN to port 443, TCP ACK to port 80, and ICMP timestamp request probes to determine if a host is up. This is a non-intrusive method of host discovery and does not send any probes to specific ports that could trigger alerts on an IDS device. Option A (--top-ports) is used to scan the top N most frequently used ports on a host, and is not used for host discovery. Option C (-sL) sends a list scan and does not send any probes to determine if a host is up. This option simply lists the targets that would be scanned by Nmap. Option D (-sV) is used for version detection and does not send any probes to determine if a host is up.
The "-sP" option instructs Nmap to perform a simple ping scan to determine which hosts are alive on the network. This type of scan does not send any packets to the target hosts' ports, so it should not trigger any intrusive portscan alerts on the IDS device. The output of this command will list the IP addresses of the live hosts found on the network.