312-50V9 · Question #495
ICMP ping and ping sweeps are used to check for active systems and to check
The correct answer is A. if ICMP ping traverses a firewall. ICMP ping sweeps identify active hosts and also test whether ICMP traffic is permitted through a firewall, revealing firewall rule configurations.
Question
ICMP ping and ping sweeps are used to check for active systems and to check
Options
- Aif ICMP ping traverses a firewall.
- Bthe route that the ICMP ping took.
- Cthe location of the switchport in relation to the ICMP ping.
- Dthe number of hops an ICMP ping takes to reach a destination.
How the community answered
(51 responses)- A92% (47)
- B4% (2)
- C2% (1)
- D2% (1)
Why each option
ICMP ping sweeps identify active hosts and also test whether ICMP traffic is permitted through a firewall, revealing firewall rule configurations.
When a ping sweep is conducted, the ability of ICMP echo requests to reach a host and return an echo reply confirms both that the host is active and that the firewall or ACL permits ICMP traffic. If no reply is received, it may indicate the firewall is blocking ICMP rather than the host being offline. This dual-purpose check makes ping sweeps a common reconnaissance technique for mapping firewall policies.
Determining the route an ICMP packet takes is the function of traceroute, not a standard ping sweep.
Identifying the physical switchport location of a device is a Layer 2 function performed via tools like CDP or MAC address table lookups, not ICMP ping.
Counting the number of hops between source and destination is performed by traceroute using TTL decrement behavior, not by ICMP ping sweeps.
Concept tested: ICMP ping sweep for host discovery and firewall testing
Source: https://nmap.org/book/host-discovery-techniques.html
Topics
Community Discussion
No community discussion yet for this question.