GIAC GCED Exam - Topic 6 Question 69 Discussion

Actual exam question for GIAC's GCED exam

Question #: 69
Topic #: 6

[All GCED Questions]

How does an Nmap connect scan work?

AIt sends a SYN, waits for a SYN/ACK, then sends a RST.

BIt sends a SYN, waits for a ACK, then sends a RST.

CIt sends a SYN, waits for a ACK, then sends a SYN/ACK.

DIt sends a SYN, waits for a SYN/ACK, then sends a ACK

Show Suggested Answer

Suggested Answer: A

An Nmap connect scan sends a SYN, waits for a SYN/ACK, then sends a ACK to complete the three-way handshake. A Nmap half-open scan sends a SYN, waits for a SYN/ACK, then sends a RST.

by Quentin at Nov 19, 2025, 01:06 PM

Limited Time Offer

25%

Off

Get Premium GCED Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lorrine

2 months ago

A is the classic three-way handshake. Can't go wrong!

upvoted 0 times

...

Chu

2 months ago

I chose D. But now I see why A is better.

upvoted 0 times

...

Anglea

2 months ago

A is definitely correct. RST is crucial after SYN/ACK.

upvoted 0 times

...

Belen

2 months ago

I’m torn between A and D. But A feels right.

upvoted 0 times

...

Maddie

2 months ago

Yeah, A makes sense. SYN/ACK is key.

upvoted 0 times

...

Edelmira

3 months ago

I think it's A. That's how TCP works, right?

upvoted 0 times

...

Keneth

3 months ago

I’m not sure about this, can someone explain why A) is right?

upvoted 0 times

...

Kaitlyn

3 months ago

Wait, does it really send a RST after the SYN/ACK?

upvoted 0 times

...

Billi

4 months ago

I thought it was B) at first, but A) makes more sense.

upvoted 0 times

...

Eveline

4 months ago

Nmap? More like Nmap-not-sure-how-this-works! Seriously, these TCP connection details are a nightmare to remember.

upvoted 0 times

...

Nieves

4 months ago

Hmm, I thought the Nmap connect scan sent a SYN, waited for an ACK, and then sent a RST. Guess I need to review my TCP/IP fundamentals again.

upvoted 0 times

...

Justine

4 months ago

I'm pretty sure the Nmap connect scan sends a SYN, waits for a SYN/ACK, and then sends a RST to close the connection. Option A looks right to me.

upvoted 0 times

...

Major

4 months ago

I feel like I’ve seen this in a lab exercise. I’m leaning towards D, but I can’t quite recall the details.

upvoted 0 times

...

Lucy

4 months ago

I’m a bit confused. I thought it was about sending an ACK after the SYN/ACK, but that might be for a different type of scan.

upvoted 0 times

...

Rory

5 months ago

I remember practicing a similar question, and I think the right answer is A. It makes sense to send a RST after receiving a SYN/ACK.

upvoted 0 times

...

France

5 months ago

I think an Nmap connect scan sends a SYN and waits for a SYN/ACK, but I'm not sure about the next step.

upvoted 0 times

...

Donette

5 months ago

Okay, I've got this. The connect scan sends a SYN, waits for a SYN/ACK, then sends an ACK to complete the three-way handshake. So the answer is D.

upvoted 0 times

...

Theresia

5 months ago

Ugh, I'm drawing a blank on the specifics of the Nmap connect scan. Let me think this through step-by-step. I want to make sure I get this right.

upvoted 0 times

...

Dana

5 months ago

Ah, the Nmap connect scan! I remember this from the network security unit. I'm pretty confident the answer is D - it sends a SYN, waits for a SYN/ACK, then sends an ACK to establish the connection.

upvoted 0 times

...

Ilda

5 months ago

A) is the correct answer! Classic TCP handshake.

upvoted 0 times

...

Harrison

6 months ago

Option D is the correct answer. The Nmap connect scan sends a SYN, waits for a SYN/ACK, and then sends an ACK to complete the TCP three-way handshake.

upvoted 0 times

...

Arletta

6 months ago

Wait, isn't the Nmap connect scan supposed to send a SYN, wait for a SYN/ACK, and then send another SYN? I'm a bit confused here.

upvoted 0 times

...

Lajuana

6 months ago

Definitely A), no doubt about it!

upvoted 0 times

...

Tu

6 months ago

Hmm, I'm a little unsure about this one. I know Nmap has different scan types, but I can't quite remember how the connect scan works. I'll have to think this through carefully.

upvoted 0 times

...

Wilbert

6 months ago

I'm pretty sure this is a connect scan, so I think the answer is D. I remember learning that a connect scan sends a SYN, waits for a SYN/ACK, then sends an ACK to complete the connection.

upvoted 0 times