GIAC GCED Exam - Topic 6 Question 69 Discussion

Actual exam question for GIAC's GCED exam

Question #: 69
Topic #: 6

[All GCED Questions]

How does an Nmap connect scan work?

AIt sends a SYN, waits for a SYN/ACK, then sends a RST.

BIt sends a SYN, waits for a ACK, then sends a RST.

CIt sends a SYN, waits for a ACK, then sends a SYN/ACK.

DIt sends a SYN, waits for a SYN/ACK, then sends a ACK

Show Suggested Answer

Suggested Answer: A

An Nmap connect scan sends a SYN, waits for a SYN/ACK, then sends a ACK to complete the three-way handshake. A Nmap half-open scan sends a SYN, waits for a SYN/ACK, then sends a RST.

by Quentin at Nov 19, 2025, 01:06 PM

Limited Time Offer

25%

Off

Get Premium GCED Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Keneth

15 hours ago

I’m not sure about this, can someone explain why A) is right?

upvoted 0 times

...

Kaitlyn

6 days ago

Wait, does it really send a RST after the SYN/ACK?

upvoted 0 times

...

Billi

11 days ago

I thought it was B) at first, but A) makes more sense.

upvoted 0 times

...

Eveline

16 days ago

Nmap? More like Nmap-not-sure-how-this-works! Seriously, these TCP connection details are a nightmare to remember.

upvoted 0 times

...

Nieves

21 days ago

Hmm, I thought the Nmap connect scan sent a SYN, waited for an ACK, and then sent a RST. Guess I need to review my TCP/IP fundamentals again.

upvoted 0 times

...

Justine

26 days ago

I'm pretty sure the Nmap connect scan sends a SYN, waits for a SYN/ACK, and then sends a RST to close the connection. Option A looks right to me.

upvoted 0 times

...

Major

1 month ago

I feel like I’ve seen this in a lab exercise. I’m leaning towards D, but I can’t quite recall the details.

upvoted 0 times

...

Lucy

1 month ago

I’m a bit confused. I thought it was about sending an ACK after the SYN/ACK, but that might be for a different type of scan.

upvoted 0 times

...

Rory

1 month ago

I remember practicing a similar question, and I think the right answer is A. It makes sense to send a RST after receiving a SYN/ACK.

upvoted 0 times

...

France

2 months ago

I think an Nmap connect scan sends a SYN and waits for a SYN/ACK, but I'm not sure about the next step.

upvoted 0 times

...

Donette

2 months ago

Okay, I've got this. The connect scan sends a SYN, waits for a SYN/ACK, then sends an ACK to complete the three-way handshake. So the answer is D.

upvoted 0 times

...

Theresia

2 months ago

Ugh, I'm drawing a blank on the specifics of the Nmap connect scan. Let me think this through step-by-step. I want to make sure I get this right.

upvoted 0 times

...

Dana

2 months ago

Ah, the Nmap connect scan! I remember this from the network security unit. I'm pretty confident the answer is D - it sends a SYN, waits for a SYN/ACK, then sends an ACK to establish the connection.

upvoted 0 times

...

Ilda

2 months ago

A) is the correct answer! Classic TCP handshake.

upvoted 0 times

...

Harrison

2 months ago

Option D is the correct answer. The Nmap connect scan sends a SYN, waits for a SYN/ACK, and then sends an ACK to complete the TCP three-way handshake.

upvoted 0 times

...

Arletta

3 months ago

Wait, isn't the Nmap connect scan supposed to send a SYN, wait for a SYN/ACK, and then send another SYN? I'm a bit confused here.

upvoted 0 times

...

Lajuana

3 months ago

Definitely A), no doubt about it!

upvoted 0 times

...

Tu

3 months ago

Hmm, I'm a little unsure about this one. I know Nmap has different scan types, but I can't quite remember how the connect scan works. I'll have to think this through carefully.

upvoted 0 times

...

Wilbert

3 months ago

I'm pretty sure this is a connect scan, so I think the answer is D. I remember learning that a connect scan sends a SYN, waits for a SYN/ACK, then sends an ACK to complete the connection.

upvoted 0 times

...