nerdexam
EC-Council

EC0-350 · Question #161

EC0-350 Question #161: Real Exam Question with Answer & Explanation

Sign in or unlock EC0-350 to reveal the answer and full explanation for question #161. The question stem and answer options stay visible for context.

Question

Wayne is the senior security analyst for his company. Wayne is examining some traffic logs on a server and came across some inconsistencies. Wayne finds some IP packets from a computer purporting to be on the internal network. The packets originate from 192.168.12.35 with a TTL of 15. The server replied to this computer and received a response from 192.168.12.35 with a TTL of 21. What can Wayne infer from this traffic log?

Options

  • AThe initial traffic from 192.168.12.35 was being spoofed.
  • BThe traffic from 192.168.12.25 is from a Linux computer.
  • CThe TTL of 21 means that the client computer is on wireless.
  • DThe client computer at 192.168.12.35 is a zombie computer.

Unlock EC0-350 to see the answer

You've previewed enough free EC0-350 questions. Unlock EC0-350 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full EC0-350 Practice