Which option excludes specific IPs or ranges from the scan?

Which option excludes specific IPs or ranges from the scan?

• A. -n
• B. --exclude
• C. -iL
• D. --traceroute

Answer: (B)

Excluding specific hosts from the scan is about controlling the target set by telling the scanner which addresses to skip. The option that does this lets you list IPs, hostnames, or ranges to omit from the run, so you can focus on the devices you want while leaving others untouched. This is particularly useful when certain devices are off-limits or you know they don’t need to be scanned. For example, you could run a scan on a subnet but skip a couple of hosts and a small range: nmap -sS 192.168.1.0/24 --exclude 192.168.1.5,192.168.1.10-20. The other options shown don’t perform exclusion: one disables DNS resolution, another reads targets from a file, and the last performs a traceroute instead of controlling which targets are included.

Excluding specific hosts from the scan is about controlling the target set by telling the scanner which addresses to skip. The option that does this lets you list IPs, hostnames, or ranges to omit from the run, so you can focus on the devices you want while leaving others untouched. This is particularly useful when certain devices are off-limits or you know they don’t need to be scanned.

For example, you could run a scan on a subnet but skip a couple of hosts and a small range: nmap -sS 192.168.1.0/24 --exclude 192.168.1.5,192.168.1.10-20. The other options shown don’t perform exclusion: one disables DNS resolution, another reads targets from a file, and the last performs a traceroute instead of controlling which targets are included.