In Nmap, what does the -sV option do?

In Nmap, what does the -sV option do?

• A. OS detection
• B. Version detection
• C. Script scanning
• D. Packet crafting

Answer: (B)

Version detection identifies the exact software and its version running on open ports. In Nmap, the -sV flag activates this capability, sending targeted probes to services and comparing the responses against a fingerprint database to determine the service name and version (and sometimes the patch level). This goes beyond simply knowing a port is open; it tells you what software is handling that port, which is essential for accurate vulnerability assessment and inventory. Other features, like OS detection, would identify the host’s operating system; script scanning runs NSE scripts for additional data; and packet crafting involves building custom packets—none of these reveal the specific version of a service the way -sV does.

Version detection identifies the exact software and its version running on open ports. In Nmap, the -sV flag activates this capability, sending targeted probes to services and comparing the responses against a fingerprint database to determine the service name and version (and sometimes the patch level). This goes beyond simply knowing a port is open; it tells you what software is handling that port, which is essential for accurate vulnerability assessment and inventory. Other features, like OS detection, would identify the host’s operating system; script scanning runs NSE scripts for additional data; and packet crafting involves building custom packets—none of these reveal the specific version of a service the way -sV does.