nerdexam
Mile2_Security

ML0-320 · Question #168

ML0-320 Question #168: Real Exam Question with Answer & Explanation

Sign in or unlock ML0-320 to reveal the answer and full explanation for question #168. The question stem and answer options stay visible for context.

Question

Bob is working as an Instrusion Detection System administrator for a company called CCCure. Being a keen analyst he has noted a very large amount of SYN packet being sent to some of his external IP addresses. At first it looked like normal daily traffic but somehow it seems that after his internet facing hosts sends a SYN/ACK reply back to the connection request, the final ACK packet is never received from the remote host. What type of scan does this pattern indicate?

Options

  • AA FIN Scan
  • BA Vanilla port scan
  • CA Half-Open Scan
  • DA NULL scan

Unlock ML0-320 to see the answer

You've previewed enough free ML0-320 questions. Unlock ML0-320 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full ML0-320 Practice