nerdexam
EC-Council

312-50V11 · Question #602

ICMP ping and ping sweeps are used to check for active systems and to check

The correct answer is A. if ICMP ping traverses a firewall.. ICMP ping sweeps identify active hosts and also test whether ICMP traffic is permitted to pass through a firewall.

Scanning Networks

Question

ICMP ping and ping sweeps are used to check for active systems and to check

Options

  • Aif ICMP ping traverses a firewall.
  • Bthe route that the ICMP ping took.
  • Cthe location of the switchport in relation to the ICMP ping.
  • Dthe number of hops an ICMP ping takes to reach a destination.

How the community answered

(54 responses)
  • A
    89% (48)
  • B
    4% (2)
  • C
    6% (3)
  • D
    2% (1)

Why each option

ICMP ping sweeps identify active hosts and also test whether ICMP traffic is permitted to pass through a firewall.

Aif ICMP ping traverses a firewall.Correct

Beyond finding live hosts, ping sweeps reveal whether ICMP echo request packets are allowed through network security devices such as firewalls or ACLs. If responses are blocked or absent, it indicates the firewall may be filtering ICMP, which is itself useful reconnaissance data. This dual-purpose behavior makes ping sweeps a foundational network mapping technique.

Bthe route that the ICMP ping took.

Determining the exact route packets travel is the function of traceroute, which uses incrementing TTL values, not a standard ICMP ping sweep.

Cthe location of the switchport in relation to the ICMP ping.

Ping operates at Layer 3 and has no awareness of Layer 2 switchport assignments; identifying switchport locations requires switch-level management tools.

Dthe number of hops an ICMP ping takes to reach a destination.

Counting the number of hops to a destination is performed by traceroute using TTL expiration, not by ping or ping sweeps.

Concept tested: ICMP ping sweep purpose and firewall detection

Source: https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/ping

Topics

#ICMP#ping sweep#active host discovery#firewall traversal

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice