nerdexam
EC-Council

312-50V13 · Question #621

A Certified Ethical Hacker is attempting to gather information about a target organization's network structure through network footprinting. During the operation, they encounter ICMP blocking by the…

The correct answer is A. Use UDP Traceroute in the Linux operating system by executing the 'traceroute' command with. When a firewall blocks ICMP, an ethical hacker can still map network paths by using UDP-based traceroute tools.

Submitted by cyberguy42· Mar 6, 2026Footprinting and Reconnaissance

Question

A Certified Ethical Hacker is attempting to gather information about a target organization's network structure through network footprinting. During the operation, they encounter ICMP blocking by the target system's firewall. The hacker wants to ascertain the path that packets take to the host system from a source, using an alternative protocol. Which of the following actions should the hacker consider next?

Options

  • AUse UDP Traceroute in the Linux operating system by executing the 'traceroute' command with
  • BUse the ICMP Traceroute on the Windows operating system as it is the default utility.
  • CUse the ARIN Whois database search tool to find the network range of the target network.
  • DUtilize the Path Analyzer Pro to trace the route from the source to the destination target systems.

How the community answered

(38 responses)
  • A
    79% (30)
  • B
    3% (1)
  • C
    11% (4)
  • D
    8% (3)

Why each option

When a firewall blocks ICMP, an ethical hacker can still map network paths by using UDP-based traceroute tools.

AUse UDP Traceroute in the Linux operating system by executing the 'traceroute' command withCorrect

The 'traceroute' command in Linux by default uses UDP packets (or can be explicitly configured to do so) to perform route tracing, which can bypass firewalls specifically configured to block ICMP traffic. This allows the hacker to discover the path packets take to a host even when traditional ICMP-based traceroute is blocked.

BUse the ICMP Traceroute on the Windows operating system as it is the default utility.

This is incorrect because the question states that ICMP is blocked, making an ICMP Traceroute ineffective.

CUse the ARIN Whois database search tool to find the network range of the target network.

This is incorrect because ARIN Whois provides public registration information about network ranges, not real-time network path tracing.

DUtilize the Path Analyzer Pro to trace the route from the source to the destination target systems.

This is incorrect because while Path Analyzer Pro is a network analysis tool, the most direct and common action an ethical hacker would consider given the specific constraint (ICMP blocked, alternative protocol) is a built-in OS utility like UDP traceroute.

Concept tested: Bypassing ICMP blocking with UDP traceroute

Source: https://man7.org/linux/man-pages/man8/traceroute.8.html

Topics

#network footprinting#ICMP blocking#traceroute#UDP traceroute

Community Discussion

No community discussion yet for this question.

Full 312-50V13 Practice