Which option in Hping creates a scan that uses FIN, PUSH, and URG flags on port 80?

• A. FIN, PUSH and URG scan on port 80
• B. SYN scan on port 80
• C. ICMP ping scan on port 80
• D. ARP ping scan on port 80

Answer: (A)

This question tests understanding that combining FIN, PUSH (PSH), and URG flags creates an Xmas (Christmas tree) scan. In TCP scanning, sending a segment with those three flags set leverages how some hosts respond to unusual flag combinations. Often open ports don’t respond, while closed ports may reply with a RST, allowing you to infer port state even when the target is trying to hide it. Port 80 is simply the destination port in this probe.

The other scan types described correspond to different flag usage: a SYN scan uses the SYN flag to perform a half-open handshake; an ICMP ping scan uses ICMP echo requests instead of TCP flags; an ARP ping scan operates at the local network layer to map devices and does not target a specific TCP port.