EC-Council
EC0-350 · Question #135
To see how some of the hosts on your network react, Winston sends out SYN packets to an IP range. A number of IPs respond with a SYN/ACK response. Before the connection is established he sends RST…
The correct answer is D. He is using a half-open scan to find live hosts on your network. See the full explanation below for the reasoning.
Question
To see how some of the hosts on your network react, Winston sends out SYN packets to an IP range. A number of IPs respond with a SYN/ACK response. Before the connection is established he sends RST packets to those hosts to stop the session. Winston has done this to see how his intrusion detection system will log the traffic. What type of scan is Winston attempting here?
Options
- AWinston is attempting to find live hosts on your company's network by using an XMAS scan.
- BHe is utilizing a SYN scan to find live hosts that are listening on your network.
- CThis type of scan he is using is called a NULL scan.
- DHe is using a half-open scan to find live hosts on your network.
How the community answered
(40 responses)- A3% (1)
- B13% (5)
- C8% (3)
- D78% (31)
Community Discussion
No community discussion yet for this question.