GCIH · Question #389
One type of FTP scan allows you to find a weakness in a certain type of firewall. These firewalls will allow an FTP data connection to take place, even though the FTP control connection hasn't…
The correct answer is B. The firewall is a sample packet-filtering firewall that is unable to recognize and test for existing. A simple packet-filtering firewall does not have the ability to recognize existing connections and will allow an FTP data connection, even if no control connection has taken place. Stateful firewalls do not share this limitation, since the control connection is recorded in the…
Question
One type of FTP scan allows you to find a weakness in a certain type of firewall. These firewalls will allow an FTP data connection to take place, even though the FTP control connection hasn't occurred. What is the root cause of this limitation?
Options
- AThe FTP server is not configured to require both the control connection and the data connection
- BThe firewall is a sample packet-filtering firewall that is unable to recognize and test for existing
- CBecause FTP control and data connections use the same port, the anomalous behavior should
- DThe firewall has been kept patched and is therefore vulnerable to malicious scanning
How the community answered
(37 responses)- A14% (5)
- B78% (29)
- C3% (1)
- D5% (2)
Explanation
A simple packet-filtering firewall does not have the ability to recognize existing connections and will allow an FTP data connection, even if no control connection has taken place. Stateful firewalls do not share this limitation, since the control connection is recorded in the state table. On stateful firewalls, an incoming data connection is verified against the state table to check for an existing connection.
Topics
Community Discussion
No community discussion yet for this question.