nerdexam
EC-Council

412-79V9 · Question #56

Due to illegal inputs, various types of TCP stacks respond in a different manner. Some IDSs do not take into account the TCP protocol's urgency feature, which could allow testers to evade the IDS…

The correct answer is D. All flags. See the full explanation below for the reasoning.

Question

Due to illegal inputs, various types of TCP stacks respond in a different manner. Some IDSs do not take into account the TCP protocol's urgency feature, which could allow testers to evade the IDS. Penetration tester needs to try different combinations of TCP flags (e.g. none, SYN/FIN, SYN/RST, SYN/FIN/ACK, SYN/RST/ACK, and All Flags) to test the IDS. Which of the following TCP flag combinations combines the problem of initiation, midstream, and termination flags with the PSH and URG?

Options

  • ASYN/RST/ACK
  • BSYN/FIN/ACK
  • CSYN/FIN
  • DAll flags

How the community answered

(25 responses)
  • A
    4% (1)
  • B
    4% (1)
  • C
    8% (2)
  • D
    84% (21)

Community Discussion

No community discussion yet for this question.

Full 412-79V9 Practice