Syn Scan — CompTIA PenTest+ (PT0-002) Practice Questions
A SYN scan, sometimes called a half-open scan, works by sending a TCP SYN packet to a target port and observing whether a SYN-ACK (open) or RST (closed) response is returned, without completing the three-way handshake. This technique is covered on the PenTest+ exam because it is stealthier than a full connect scan and generates fewer log entries on many systems. Understanding when and why to use SYN scans is part of the exam's coverage of network enumeration tradecraft.