nerdexam
GIAC

GCIH · Question #672

Which of the following is the most effective technique for identifying live client systems on a LAN?

The correct answer is A. ICMP Echo Requests. ICMP Echo Requests (ping) are the fastest and most direct method for discovering which hosts are active on a local area network.

Reconnaissance, Scanning, and Enumeration

Question

Which of the following is the most effective technique for identifying live client systems on a LAN?

Options

  • AICMP Echo Requests
  • BTCP FIN scanning
  • CTraceroute
  • DDNS Zone Transfer

How the community answered

(47 responses)
  • A
    94% (44)
  • C
    2% (1)
  • D
    4% (2)

Why each option

ICMP Echo Requests (ping) are the fastest and most direct method for discovering which hosts are active on a local area network.

AICMP Echo RequestsCorrect

ICMP Echo Requests send a ping packet to a target IP address and wait for an Echo Reply, confirming the host is alive and reachable on the network. This technique is simple, fast, and universally supported across all IP-enabled devices on a LAN. It forms the standard foundation for host discovery in tools like nmap's ping scan mode (-sn).

BTCP FIN scanning

TCP FIN scanning is a stealth technique used to probe open ports on already-identified hosts, not a method for discovering which hosts are live on a network.

CTraceroute

Traceroute maps the routing path between two endpoints hop by hop and is not designed to enumerate or identify multiple live hosts across a LAN.

DDNS Zone Transfer

DNS Zone Transfer is a DNS replication mechanism that copies zone records between name servers and cannot actively probe or identify live hosts on a network segment.

Concept tested: ICMP-based live host discovery on LAN

Source: https://nmap.org/book/man-host-discovery.html

Topics

#host discovery#ICMP echo#network scanning#LAN reconnaissance

Community Discussion

No community discussion yet for this question.

Full GCIH Practice