To detect all open ports and enumerate services, the tester needs to:
Use -sV (Service Version Detection)
Use -Pn (Disables ICMP ping to bypass firewalls)
Use -p- (Scans all 65,535 TCP ports)
nmap -sV -Pn -p- 10.10.10.10 (Option D):
This command performs full-port scanning, including high-numbered ports like 50123/tcp (ms-rpc).
Without -p-, high ports would be missed.
[Reference: CompTIA PenTest+ PT0-003 Official Study Guide - "Nmap Scanning Techniques", Incorrect options:, Option A (-A): Includes OS detection but does not guarantee scanning all ports., Option B (-sV without -p-): Scans default ports only, missing 50123/tcp., Option C (-w): Invalid Nmap flag., , , ]
Submit