nerdexam
EC-CouncilEC-Council

312-49 · Question #382

312-49 Question #382: Real Exam Question with Answer & Explanation

The correct answer is B: Test ability of a router to handle over-sized packets. The nmap flag --data_length 66000 appends 66,000 bytes of random data to each probe packet. Since the maximum legal IPv4 packet size is 65,535 bytes, packets of this size exceed the allowed maximum and are considered oversized (jumbo/malformed) packets. This tests how a router ha

Submitted by jakub_pl· Apr 18, 2026Network Forensics

Question

What will the following command accomplish? C:\> nmap -v -sS -Po 172.16.28.251 - data_length 66000 - packet_trace

Options

  • ATest the ability of a router to handle under-sized packets
  • BTest ability of a router to handle over-sized packets
  • CTest the ability of a WLAN to handle fragmented packets
  • DTest the ability of a router to handle fragmented packets

Explanation

The nmap flag --data_length 66000 appends 66,000 bytes of random data to each probe packet. Since the maximum legal IPv4 packet size is 65,535 bytes, packets of this size exceed the allowed maximum and are considered oversized (jumbo/malformed) packets. This tests how a router handles such abnormally large packets — whether it drops, fragments, or crashes on them. The -sS flag performs a TCP SYN (stealth) scan, -v enables verbose output, -Po skips the ping pre-check, and --packet-trace shows each packet sent and received.

Topics

#Nmap#Network Scanning#Packet Manipulation#Network Stress Testing

Community Discussion

No community discussion yet for this question.

Full 312-49 PracticeBrowse All 312-49 Questions