You are performing host discovery on a local Ethernet segment where you have administrative access to your own machine but not to the network infrastructure. You need to identify all active hosts on the segment quickly and with minimal traffic. Which technique is most efficient?

TCP SYN scan to port 80 on all IPs

ICMP echo scan using ping sweep

ARP scan using arp-scan or Nmap's -PR

EC-CouncilCertified Ethical Hacker

Domain 2Objective 3

Network Scanning and Host Discovery CEH Practice Questions (Page 10)

Part of the Reconnaissance Techniques domain, which makes up ~14% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~13–22 in this domain), expect 2–3 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

8concepts

Questions 46–46

46application · easy
You are performing host discovery on a local Ethernet segment where you have administrative access to your own machine but not to the network infrastructure. You need to identify all active hosts on the segment quickly and with minimal traffic. Which technique is most efficient?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Network Scanning and Host Discovery CEH Practice Questions (Page 10)

Questions 46–46

You are performing host discovery on a local Ethernet segment where you have administrative access to your own machine but not to the network infrastructure. You need to identify all active hosts on the segment quickly and with minimal traffic. Which technique is most efficient?

Keep studying — Reconnaissance Techniques