GAQM
CPEH-001 · Question #624
A specific site received 91 ICMP_ECHO packets within 90 minutes from 47 different sites. 77 of the ICMP_ECHO packets had an ICMP ID:39612 and Seq:57072. 13 of the ICMP_ECHO packets had an ICMP ID:0…
The correct answer is B. ICMP ID and Seq numbers were most likely set by a tool and not by the operating system. See the full explanation below for the reasoning.
Question
A specific site received 91 ICMP_ECHO packets within 90 minutes from 47 different sites. 77 of the ICMP_ECHO packets had an ICMP ID:39612 and Seq:57072. 13 of the ICMP_ECHO packets had an ICMP ID:0 and Seq:0. What can you infer from this information?
Options
- AThe packets were sent by a worm spoofing the IP addresses of 47 infected sites
- BICMP ID and Seq numbers were most likely set by a tool and not by the operating system
- CAll 77 packets came from the same LAN segment and hence had the same ICMP ID and Seq
- D13 packets were from an external network and probably behind a NAT, as they had an ICMP ID 0
How the community answered
(45 responses)- A4% (2)
- B80% (36)
- C13% (6)
- D2% (1)
Community Discussion
No community discussion yet for this question.