nerdexam
EC-Council

EC0-350 · Question #517

A specific site received 91 ICMP_ECHO packets within 90 minutes from 47 different sites. 77 of the ICMP_ECHO packets had an ICMP ID:39612 and Seq:57072. 13 of the ICMP_ECHO packets had an ICMP ID:0…

The correct answer is B. ICMP ID and Seq numbers were most likely set by a tool and not by the operating system. See the full explanation below for the reasoning.

Question

A specific site received 91 ICMP_ECHO packets within 90 minutes from 47 different sites. 77 of the ICMP_ECHO packets had an ICMP ID:39612 and Seq:57072. 13 of the ICMP_ECHO packets had an ICMP ID:0 and Seq:0. What can you infer from this information?

Options

  • AThe packets were sent by a worm spoofing the IP addresses of 47 infected sites
  • BICMP ID and Seq numbers were most likely set by a tool and not by the operating system
  • CAll 77 packets came from the same LAN segment and hence had the same ICMP ID and Seq number
  • D13 packets were from an external network and probably behind a NAT, as they had an ICMP ID 0

How the community answered

(49 responses)
  • A
    4% (2)
  • B
    82% (40)
  • C
    4% (2)
  • D
    10% (5)

Community Discussion

No community discussion yet for this question.

Full EC0-350 Practice