Larry doesn't want to learn how subnetting or routing works, and just wants to take a wild guess at a scan. He has an inside position so scanning private addresses is OK. He downloads Angry IP and puts in a range of 192.168.0.0/16.
What is the best statement in regard to what Larry is doing?
A) Seems like Larry is taking a reasonable approach. He expects the scan to take awhile, and he can do other things while he waits.
B) 192.168.0.0/16 is an RFC 1918 compliant range, but this scan will attempt to reach over 65000 hosts and there are better ways of doing this.
C) RFC 1918 specifies 192.16.1.0/24 as a private range, and Larry is trying a class B mask. Larry is wasting his time
D) He should get the network block from ARIN and scan from the outside if he wants to make sure he sees every inside host.

Question

Quizplus · Accepted Answer

Read RFC 1918 thoroughly. Also, don't cheat on your scans. A skilled attacker will use proper techniques like DNS walking and tracerouting to make sure their scans are targeted deliberately. It is part of the clearing tracks phase not to create excessive traffic.

Larry Doesn't Want to Learn How Subnetting or Routing Works