Juniper
JN0-632 · Question #92
While performing routine monitoring of your network, you notice an unusual increase in activity. You check the logs and notice a specific set of flows from a single source IP address. In analyzing…
The correct answer is C. The attacker is using a NULL scan. See the full explanation below for the reasoning.
Question
While performing routine monitoring of your network, you notice an unusual increase in activity. You check the logs and notice a specific set of flows from a single source IP address. In analyzing these flows you determine that a remote host has sent several packets to your server with no TCP flags set. Which scan is being used?
Options
- AThe attacker is using an XMAS tree scan.
- BThe attacker is using a SYN scan.
- CThe attacker is using a NULL scan.
- DThe attacker is using a FIN scan.
How the community answered
(25 responses)- A4% (1)
- B12% (3)
- C76% (19)
- D8% (2)
Community Discussion
No community discussion yet for this question.