When using -8 or --scan with Hping in scan mode and pairing -S, what scan type and port range are performed?

• A. FIN, PUSH and URG scan on port 80
• B. ICMP ping scan on subnet 10.0.1.x
• C. SYN scan on port 50-60
• D. ARP ping scan

Answer: (C)

Understanding how Hping’s scan mode works with the SYN flag is the key. When you enable scan mode (-8 or --scan) and set the SYN flag (-S), you’re performing a TCP SYN probe across a range of destination ports. The tool sends a SYN packet to each port in the specified range and interprets the responses to determine which ports are open, closed, or filtered. This yields a SYN scan, which is fast and doesn’t complete the full TCP handshake, making it a stealthier way to map open ports within the given range. The other options describe different methods (such as various non-SYN scans or using ICMP/ARP) and don’t reflect the combination of scan mode with the SYN flag.