312-50V13 · Question #621
A Certified Ethical Hacker is attempting to gather information about a target organization's network structure through network footprinting. During the operation, they encounter ICMP blocking by the…
The correct answer is A. Use UDP Traceroute in the Linux operating system by executing the 'traceroute' command with. When a firewall blocks ICMP, an ethical hacker can still map network paths by using UDP-based traceroute tools.
Question
Options
- AUse UDP Traceroute in the Linux operating system by executing the 'traceroute' command with
- BUse the ICMP Traceroute on the Windows operating system as it is the default utility.
- CUse the ARIN Whois database search tool to find the network range of the target network.
- DUtilize the Path Analyzer Pro to trace the route from the source to the destination target systems.
How the community answered
(38 responses)- A79% (30)
- B3% (1)
- C11% (4)
- D8% (3)
Why each option
When a firewall blocks ICMP, an ethical hacker can still map network paths by using UDP-based traceroute tools.
The 'traceroute' command in Linux by default uses UDP packets (or can be explicitly configured to do so) to perform route tracing, which can bypass firewalls specifically configured to block ICMP traffic. This allows the hacker to discover the path packets take to a host even when traditional ICMP-based traceroute is blocked.
This is incorrect because the question states that ICMP is blocked, making an ICMP Traceroute ineffective.
This is incorrect because ARIN Whois provides public registration information about network ranges, not real-time network path tracing.
This is incorrect because while Path Analyzer Pro is a network analysis tool, the most direct and common action an ethical hacker would consider given the specific constraint (ICMP blocked, alternative protocol) is a built-in OS utility like UDP traceroute.
Concept tested: Bypassing ICMP blocking with UDP traceroute
Source: https://man7.org/linux/man-pages/man8/traceroute.8.html
Topics
Community Discussion
No community discussion yet for this question.