EC-Council
EC0-350 · Question #517
A specific site received 91 ICMP_ECHO packets within 90 minutes from 47 different sites. 77 of the ICMP_ECHO packets had an ICMP ID:39612 and Seq:57072. 13 of the ICMP_ECHO packets had an ICMP ID:0…
The correct answer is B. ICMP ID and Seq numbers were most likely set by a tool and not by the operating system. See the full explanation below for the reasoning.
Question
A specific site received 91 ICMP_ECHO packets within 90 minutes from 47 different sites. 77 of the ICMP_ECHO packets had an ICMP ID:39612 and Seq:57072. 13 of the ICMP_ECHO packets had an ICMP ID:0 and Seq:0. What can you infer from this information?
Options
- AThe packets were sent by a worm spoofing the IP addresses of 47 infected sites
- BICMP ID and Seq numbers were most likely set by a tool and not by the operating system
- CAll 77 packets came from the same LAN segment and hence had the same ICMP ID and Seq number
- D13 packets were from an external network and probably behind a NAT, as they had an ICMP ID 0
How the community answered
(49 responses)- A4% (2)
- B82% (40)
- C4% (2)
- D10% (5)
Community Discussion
No community discussion yet for this question.