Which Nmap command is designed to scan both TCP and UDP ports?

• A. nmap -n -Pn -sSu -pT: 0-65535, U:0-65535 -v -A -oX <Name> <IP>
• B. nmap -n -Pn -sS -pT:0-65535 -v -A -oX <Name> <IP>
• C. nmap -sT -p 1-1000 <IP>
• D. nmap -n -Pn -sS -pT:0-65535 -sU -v -A -oX <Name> <IP>

Answer: (A)

Scanning both TCP and UDP ports requires using scan types for both protocols and explicitly listing ports for each. The best command does exactly that: it runs a TCP scan (the stealthy SYN type) and a UDP scan, while separating the port ranges so every TCP port and every UDP port from 0 through 65535 are covered. This ensures no ports are missed on either protocol. The extra options speed up and deepen the scan, such as skipping DNS resolution, avoiding host discovery, increasing verbosity, enabling aggressive detection, and exporting results in XML. The other options either target only TCP or only a subset of ports, or don’t pair the UDP port range with the UDP scan, so they don’t guarantee a full dual-protocol port sweep.