What is one risk or consideration of idle scans?

• A. They avoid legal concerns.
• B. They have legal/ethical implications.
• C. They are widely accepted in production networks.
• D. They never require unusual traffic patterns.

Answer: (B)

Idle scans rely on a third-party host (a zombie) to mask the origin of the probe, but this approach brings real legal and ethical concerns. Scanning networks you don’t own or don’t have explicit written permission to test can violate laws against unauthorized access and violate responsible-security norms, even if the goal is legitimate. Ethically, using someone else’s device to conduct reconnaissance without consent can harm that owner and expose you to liability if the zombie is compromised or if the activity disrupts services. Because of these risks, idle scans must be performed only with clear authorization and within a tightly defined scope, and many organizations discourage or block them in production environments. They don’t eliminate legal risk and can still generate detectable or disruptive traffic, making the ethical and legal considerations a primary factor to weigh.