312-50V7 · Question #131
The traditional traceroute sends out ICMP ECHO packets with a TTL of one, and increments the TTL until the destination has been reached. By printing the gateways that generate ICMP time exceeded…
The correct answer is A. Firewalls will permit inbound TCP packets to specific ports that hosts sitting behind the firewall are. See the full explanation below for the reasoning.
Question
The traditional traceroute sends out ICMP ECHO packets with a TTL of one, and increments the TTL until the destination has been reached. By printing the gateways that generate ICMP time exceeded messages along the way, it is able to determine the path packets take to reach the destination. The problem is that with the widespread use of firewalls on the Internet today, many of the packets that traceroute sends out end up being filtered, making it impossible to completely trace the path to the destination. How would you overcome the Firewall restriction on ICMP ECHO packets?
Exhibit
Options
- AFirewalls will permit inbound TCP packets to specific ports that hosts sitting behind the firewall are
- BFirewalls will permit inbound UDP packets to specific ports that hosts sitting behind the firewall are
- CFirewalls will permit inbound UDP packets to specific ports that hosts sitting behind the firewall are
- DDo not use traceroute command to determine the path packets take to reach the destination instead use
How the community answered
(29 responses)- A79% (23)
- B7% (2)
- C10% (3)
- D3% (1)
Community Discussion
No community discussion yet for this question.