Compared to idle scans, standard scans are described as

• A. They are more complex and less reliable.
• B. They are less widely supported.
• C. They rely on DNS spoofing to avoid detection.
• D. They are simpler and more reliable.

Answer: (D)

The main idea here is how scan techniques differ in setup and reliability. Idle scans rely on a zombie host and an IP ID side channel to infer the target’s port state. That approach adds several moving parts: you must have a reachable, agreeable zombie, the zombie’s IP ID behavior must be predictable, and network conditions must cooperate. If any of those factors falter, the results can become unreliable.

Standard scans, on the other hand, probe the target directly from your machine and interpret the target’s straightforward responses (open, closed, filtered). This direct method is simpler to set up—no zombie to coordinate, no spoofed sources, no reliance on IPID quirks—and it tends to produce more consistent results across a wide range of targets and networks.

So, compared to idle scans, standard scans are simpler to operate and more reliable, even though they might sacrifice some stealth in certain scenarios.