The infected machine probes IP addresses randomly from the target network IP range and checks for vulnerabilities

• A. Hit-list Scanning
• B. Topological Scanning
• C. Random Scanning
• D. Local Subnet Scanning

Answer: (C)

Random scanning picks IP addresses from the target range in no fixed order and probes them to see if they’re alive and vulnerable. This approach is typical of fast-propagating malware, like worms, because it doesn’t rely on a pre-made list or a mapped network path. The description fits this method precisely: addresses are chosen randomly across the range, and each is checked for vulnerabilities. By contrast, hit-list scanning uses a specific precompiled list of targets, local subnet scanning concentrates on addresses within one subnet, and topological scanning focuses on uncovering the network’s structure and routing before proceeding.