nerdexam
Juniper

JN0-632 · Question #58

You notice an unusual increase in activity in your network. You investigate by reviewing logs and analyzing traffic flows. In your analysis, you identify a remote host is sending traffic to your…

The correct answer is C. The attacker is running an XMAS tree scan. See the full explanation below for the reasoning.

Question

You notice an unusual increase in activity in your network. You investigate by reviewing logs and analyzing traffic flows. In your analysis, you identify a remote host is sending traffic to your network with random TCP flags set including URG PSH, ACK and FIN. What is the attacker doing with these packets?

Options

  • AThe attacker is attempting a TCP random flag attack.
  • BThe attacker is attempting a TCP overflow attack.
  • CThe attacker is running an XMAS tree scan.
  • DThe attacker is running an idle scan.

How the community answered

(55 responses)
  • A
    15% (8)
  • B
    7% (4)
  • C
    75% (41)
  • D
    4% (2)

Community Discussion

No community discussion yet for this question.

Full JN0-632 Practice