What is the purpose of using decoy addresses in a network scan?

To increase the speed of the scan.

To hide the attacker's real IP address by making it appear that the scan comes from multiple sources.

To ensure that all ports are scanned.

To bypass authentication on the target.

EC-CouncilWeb Application Hacking and Security

Domain 8Objective 3

Network Scanning and Reconnaissance WAHS Practice Questions (Page 5)

Part of the Authentication and Session Management domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 360-minute exam (~145–240 total, ~25–41 in this domain), expect 8–14 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)

47questions here

10free pages

8concepts

Questions 21–25

21application · medium
A security analyst is performing reconnaissance on a target web application's hosting network. The analyst needs to identify which hosts are alive without completing full TCP handshakes, to reduce the chance of being logged by the target's IDS. Which Nmap scan type best meets this requirement?
Select an answer first
22application · medium
A security tester is scanning a web server and finds an open port 22. The tester needs to determine the SSH version to check for known vulnerabilities, but the client has requested that the scan be as unobtrusive as possible. Which Nmap option should the tester use?
Select an answer first
23application · easy
A security consultant is scanning a client's web server and needs to determine the underlying operating system to assess potential OS-specific vulnerabilities. The consultant has already identified that port 443 is open and running HTTPS. Which Nmap command is most appropriate for OS fingerprinting?
Select an answer first
24foundation · easy
What is the purpose of using decoy addresses in a network scan?
Select an answer first
25application · medium
A penetration tester is performing host discovery on a network where the firewall blocks ICMP echo requests but allows TCP traffic on port 443. The tester wants to identify live hosts without performing a full port scan. Which Nmap command is most appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to WAHS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “WAHS” is a trademark of its owner, used for identification only.

Network Scanning and Reconnaissance WAHS Practice Questions (Page 5)

Questions 21–25

A security analyst is performing reconnaissance on a target web application's hosting network. The analyst needs to identify which hosts are alive without completing full TCP handshakes, to reduce the chance of being logged by the target's IDS. Which Nmap scan type best meets this requirement?

A security tester is scanning a web server and finds an open port 22. The tester needs to determine the SSH version to check for known vulnerabilities, but the client has requested that the scan be as unobtrusive as possible. Which Nmap option should the tester use?

What is the purpose of using decoy addresses in a network scan?

A penetration tester is performing host discovery on a network where the firewall blocks ICMP echo requests but allows TCP traffic on port 443. The tester wants to identify live hosts without performing a full port scan. Which Nmap command is most appropriate?

Keep studying — Authentication and Session Management