312-50V13 · Question #558
If a tester is attempting to ping a target that exists but receives no response or a response that states the destination is unreachable, ICMP may be disabled and the network may be using TCP. Which o
The correct answer is B. Hping. If ICMP is disabled and standard ping fails, a tester can use hping to send custom TCP packets, such as SYN requests, to determine if a host is alive and listening on TCP ports.
Question
Options
- ATraceroute
- BHping
- CTCP ping
- DBroadcast ping
How the community answered
(44 responses)- A5% (2)
- B86% (38)
- C7% (3)
- D2% (1)
Why each option
If ICMP is disabled and standard ping fails, a tester can use `hping` to send custom TCP packets, such as SYN requests, to determine if a host is alive and listening on TCP ports.
Traceroute primarily relies on ICMP (or UDP) to map network paths, so it would likely fail if ICMP is disabled.
Hping (specifically hping3) is a powerful command-line network scanner and packet crafting tool that can send custom TCP packets, including SYN requests to specific ports, to elicit a response from a host when ICMP is blocked.
While 'TCP ping' describes the concept, it's not a specific tool or command; `hping` is a common tool used to perform such a function.
Broadcast ping sends ICMP echo requests to all hosts on a local network segment, which would not work if ICMP is disabled.
Concept tested: Network reconnaissance when ICMP is blocked
Source: https://www.kali.org/docs/networking/hping3/
Topics
Community Discussion
No community discussion yet for this question.