EC-Council
EC0-350 · Question #512
You are manually conducting Idle Scanning using Hping2. During your scanning you notice that almost every query increments the IPID regardless of the port being queried. One or two of the queries…
The correct answer is A. The zombie you are using is not truly idle. See the full explanation below for the reasoning.
Question
You are manually conducting Idle Scanning using Hping2. During your scanning you notice that almost every query increments the IPID regardless of the port being queried. One or two of the queries cause the IPID to increment by more than one value. Why do you think this occurs?
Options
- AThe zombie you are using is not truly idle.
- BA stateful inspection firewall is resetting your queries.
- CHping2 cannot be used for idle scanning.
- DThese ports are actually open on the target system.
How the community answered
(36 responses)- A81% (29)
- B6% (2)
- C3% (1)
- D11% (4)
Community Discussion
No community discussion yet for this question.