QQ1. Explain the scanning of network using NMAP.
- NMAP is an open-source tool for network discovery and security auditing.
- Host discovery identifies live devices using various ping methods (e.g., `nmap -sn`).
- TCP SYN Scan (`-sS`) is a stealthy half-open scan for open TCP ports.
- UDP Scan (`-sU`) identifies open UDP ports, often slower due to protocol nature.
Answer: NMAP, or Network Mapper, is an open-source tool widely recognized for network discovery and security auditing. As emphasized in the MSEL-032 course material on Cyber Attacks, NMAP serves as a foundational utility for ethical hackers and penetration testers, enabling them to map networks, identify live hosts, discover open ports, detect operating systems, and pinpoint running services on target systems. Network scanning is the reconnaissance phase of cybersecurity, crucial for understanding the...