nerdexam
GIAC

GCIH · Question #221

Which of the following is used to gather information about a remote network protected by a firewall?

The correct answer is D. Firewalking. Firewalking is a reconnaissance technique that uses TTL manipulation to enumerate which ports or protocols are permitted through a firewall protecting a remote network. The other options either target different attack surfaces or are not real techniques.

Reconnaissance, Scanning, and Enumeration

Question

Which of the following is used to gather information about a remote network protected by a firewall?

Options

  • AWarchalking
  • BWardialing
  • CFirechalking
  • DFirewalking

How the community answered

(44 responses)
  • B
    2% (1)
  • C
    5% (2)
  • D
    93% (41)

Why each option

Firewalking is a reconnaissance technique that uses TTL manipulation to enumerate which ports or protocols are permitted through a firewall protecting a remote network. The other options either target different attack surfaces or are not real techniques.

AWarchalking

Warchalking involves drawing symbols in physical locations to indicate nearby wireless network availability and has no relevance to firewall rule enumeration.

BWardialing

Wardialing automates dialing large ranges of phone numbers to discover modems or fax machines and does not apply to firewall-protected IP networks.

CFirechalking

Firechalking is not a recognized security technique or tool in any standard security reference.

DFirewalkingCorrect

Firewalking sends probe packets with a TTL calibrated to expire exactly one hop beyond the firewall - if a port is open the packet reaches the target host and may elicit a response, whereas closed or filtered ports yield no response or an ICMP error, allowing the attacker to map the firewall's access control rules. This technique specifically enables reconnaissance of remote networks protected by firewalls without requiring direct access to the defended segment.

Concept tested: Firewalking technique for firewall reconnaissance

Source: https://owasp.org/www-community/attacks/Firewalking

Topics

#firewalking#firewall evasion#network reconnaissance#packet analysis

Community Discussion

No community discussion yet for this question.

Full GCIH Practice