Quiz

Nmap Final Quiz

Test your foundational Nmap knowledge with 10 untimed multiple-choice questions covering discovery, ports, scan types, detection, output, and safe authorization.

Nmap Final Quiz

This final assessment contains 10 multiple-choice questions about Nmap network discovery, port scanning, service and operating system detection, output interpretation, performance, and safe scanning practices.

Instructions

• The quiz is untimed. Work at your own pace.
• Choose the best answer for each question.
• When the platform supports saved progress, you may leave and return before completing the quiz.
• Select Start quiz to begin. After submission, review your answers, see your score, and read the feedback for each question.

Start quiz: Select the platform's start action below or above this assessment.

Quick Reference

Nmap, short for Network Mapper, examines authorized targets such as hostnames, IP addresses, address ranges, and target lists. A basic command follows this pattern:

nmap TARGET

Examples include:

nmap 192.0.2.10
nmap 192.0.2.0/24
nmap -p 22,80,443 192.0.2.10
nmap -sV 192.0.2.10
nmap -O 192.0.2.10
nmap --script default 192.0.2.10
nmap -oN scan-results.txt 192.0.2.10

A target is the host, hostname, IP address, range, subnet, or target list supplied for scanning. An option such as -sS changes how Nmap scans; it is not itself a target.

Nmap Port States

Common Nmap Scan and Detection Options

Quiz Questions

1. What is Nmap primarily used for?

   1. A. Editing video files
   2. B. Network discovery and security auditing
   3. C. Encrypting every file on a computer
   4. D. Replacing a network switch's firmware

2. Before scanning a company network, what should a learner do first?

   1. Start with the fastest timing option
   2. Scan all public addresses to find the real scope
   3. Obtain permission and confirm the defined target scope and rules of engagement
   4. Disable all firewalls on the network

3. Which command uses a valid basic target form for one authorized host?

   1. nmap -sS
   2. nmap 192.0.2.10
   3. nmap -oN
   4. nmap -sV -O

4. What is the main purpose of host discovery?

   1. To determine whether targets appear online or reachable before port scanning
   2. To guarantee that every port on a host is open
   3. To identify the exact operating system without sending probes
   4. To save scan output in XML format

5. An Nmap result shows 22/tcp open ssh. What does open most directly indicate?

   1. The host is unreachable
   2. A service may be listening and accepting connections on TCP port 22
   3. A firewall definitely blocked the probe
   4. UDP is being used instead of TCP

6. Which statement correctly compares common scan types?

   1. -sS is a TCP SYN scan, -sT uses a full TCP connect, and -sU assesses UDP ports
   2. -sS performs OS detection, -sT saves text output, and -sU scans only hostnames
   3. -sS and -sT are UDP scans, while -sU is a TCP scan
   4. All three options perform exactly the same scan

7. Which command attempts to identify service products and version information?

   1. nmap -p 22,80,443 192.0.2.10
   2. nmap -sV 192.0.2.10
   3. nmap -Pn 192.0.2.10
   4. nmap -oX results.xml 192.0.2.10

8. What should you conclude from the command nmap -O 192.0.2.10 if it reports an operating system guess?

   1. The result is a guaranteed identification
   2. The result is a probabilistic estimate that can be affected by filtering and limited responses
   3. The command detected only UDP services
   4. The command disabled host discovery

9. What is the Nmap Scripting Engine used for?

   1. Running selected scripts that can support discovery, enumeration, and authorized vulnerability-related checks
   2. Changing the target's operating system
   3. Automatically granting permission to scan any network
   4. Converting every scan into a TCP connect scan

10. A scan shows many ports as filtered and the timing summary indicates a long scan. Which interpretation is most accurate?

    1. Every filtered port is definitely open, and a long scan proves the services are vulnerable
    2. Filtering may be interfering with probes, while packet loss, rate limiting, retries, and conservative timing can affect completeness and duration
    3. The target must be using UDP exclusively
    4. Scan timing has no effect on network load, accuracy, or detectability

Review and Feedback

Submit all 10 answers using the platform's submission action. The results page should show your score, identify correct and incorrect responses, and provide answer-review feedback. When interpreting results, remember that a host reported as up appears reachable to the discovery method used, while a host reported as down may be offline, incorrectly addressed, unreachable, or blocking discovery probes.

Filtered results are inconclusive about whether a port is open. UDP scans commonly take longer because UDP is connectionless and open or filtered ports may provide no response. Service and version detection can also be incomplete when a service hides banners, uses encryption or a proxy, or is affected by filtering.

Output and Reporting Reminder

A basic Nmap results table commonly contains a port, protocol, state, and service. The output also identifies the scanned host and usually includes a timing summary. Save results when permitted so that you can document findings and compare scans over time:

nmap -oN scan-results.txt 192.0.2.10
nmap -oX scan-results.xml 192.0.2.10

Use conservative scan behavior in production environments. Scan speed, parallelism, timeouts, and retries affect network load, accuracy, and detectability. Firewalls, packet loss, rate limiting, unavailable hosts, and routing problems can make results incomplete or misleading.

Quiz Blueprint

Continue Reviewing

Use this assessment alongside other foundational practice, such as the Splunk Final Quiz for security monitoring concepts or the CCENT Quiz 6 for networking fundamentals.