312-50V13 · Question #558
312-50V13 Question #558: Real Exam Question with Answer & Explanation
The correct answer is B: Hping. If ICMP is disabled and standard ping fails, a tester can use hping to send custom TCP packets, such as SYN requests, to determine if a host is alive and listening on TCP ports.
Question
If a tester is attempting to ping a target that exists but receives no response or a response that states the destination is unreachable, ICMP may be disabled and the network may be using TCP. Which other option could the tester use to get a response from a host using TCP?
Options
- ATraceroute
- BHping
- CTCP ping
- DBroadcast ping
Explanation
If ICMP is disabled and standard ping fails, a tester can use hping to send custom TCP packets, such as SYN requests, to determine if a host is alive and listening on TCP ports.
Common mistakes.
- A. Traceroute primarily relies on ICMP (or UDP) to map network paths, so it would likely fail if ICMP is disabled.
- C. While 'TCP ping' describes the concept, it's not a specific tool or command;
hpingis a common tool used to perform such a function. - D. Broadcast ping sends ICMP echo requests to all hosts on a local network segment, which would not work if ICMP is disabled.
Concept tested. Network reconnaissance when ICMP is blocked
Reference. https://www.kali.org/docs/networking/hping3/
Topics
Community Discussion
No community discussion yet for this question.