Which scan type corresponds to the RPC Scan?

Which scan type corresponds to the RPC Scan?

• A. -sO
• B. -sP
• C. -sR
• D. -sS

Answer: (C)

RPC scanning is a specialized Nmap approach that discovers Remote Procedure Call services by querying the portmapper (rpcbind) on the target. It uses RPC-specific probes to identify which RPC programs are registered and their endpoints, often revealing RPC-enabled services even when simple port probing isn’t conclusive. This behavior is activated with the -sR switch. The other scan types perform different tasks: a SYN scan (-sS) checks for open ports using half-open TCP connections, an IP protocol scan (-sO) determines which IP protocols the host supports, and a ping/host-discovery scan (-sP) just finds which hosts are up. So the RPC scan is the one that corresponds to -sR.

RPC scanning is a specialized Nmap approach that discovers Remote Procedure Call services by querying the portmapper (rpcbind) on the target. It uses RPC-specific probes to identify which RPC programs are registered and their endpoints, often revealing RPC-enabled services even when simple port probing isn’t conclusive. This behavior is activated with the -sR switch. The other scan types perform different tasks: a SYN scan (-sS) checks for open ports using half-open TCP connections, an IP protocol scan (-sO) determines which IP protocols the host supports, and a ping/host-discovery scan (-sP) just finds which hosts are up. So the RPC scan is the one that corresponds to -sR.