nerdexam
EC-Council

312-50V9 · Question #145

If a tester is attempting to ping a target that exists but receives no response or a response that states the destination is unreachable, ICMP may be disabled and the network may be using TCP. Which o

The correct answer is A. Hping. Hping is a command-line packet crafting tool that can send TCP-based probes, making it useful for host discovery when ICMP is blocked.

Scanning Networks

Question

If a tester is attempting to ping a target that exists but receives no response or a response that states the destination is unreachable, ICMP may be disabled and the network may be using TCP. Which other option could the tester use to get a response from a host using TCP?

Options

  • AHping
  • BTraceroute
  • CTCP ping
  • DBroadcast ping

How the community answered

(33 responses)
  • A
    73% (24)
  • B
    18% (6)
  • C
    3% (1)
  • D
    6% (2)

Why each option

Hping is a command-line packet crafting tool that can send TCP-based probes, making it useful for host discovery when ICMP is blocked.

AHpingCorrect

Hping is a versatile packet generator that supports TCP, UDP, and ICMP protocols, allowing a tester to send TCP SYN or ACK packets to a target host to elicit a response when ICMP is filtered or disabled. By crafting TCP packets to open ports, hping can confirm host availability even in environments where ping is blocked by firewall rules or host configuration.

BTraceroute

Traceroute primarily uses ICMP (or UDP on Linux) to map network paths and would face the same blocking issue as ping when ICMP is disabled.

CTCP ping

TCP ping is a general concept or feature found in some tools, not a standalone tool the tester would invoke - hping is the specific tool that implements this capability.

DBroadcast ping

Broadcast ping sends ICMP echo requests to a broadcast address and still relies on ICMP, which the scenario states may be disabled.

Concept tested: Host discovery using TCP probes with hping when ICMP is blocked

Source: http://www.hping.org/documentation.php

Topics

#hping#TCP ping#ICMP disabled#host discovery

Community Discussion

No community discussion yet for this question.

Full 312-50V9 Practice