Discuss EC-Council 312-38 Exam Topic 1 Question 26

Cindy is the network security administrator for her company. She just got back from a security conference in Las Vegas where they talked about all kinds of old and new security threats; many of which she did not know of. She is worried about the current security state of her company's network so she decides to start scanning the network from an external IP address. To see how some of the hosts on her network react, she sends out SYN packets to an IP range. A number of IPs responds with a SYN/ACK response. Before the connection is established, she sends RST packets to those hosts to stop the session. She has done this to see how her intrusion detection system will log the traffic. What type of scan is Cindy attempting here?

AThe type of scan she is usinq is called a NULL scan.

BCindy is using a half-open scan to find live hosts on her network.

CCindy is attempting to find live hosts on her company's network by using a XMAS scan.

DShe is utilizing a RST scan to find live hosts that are listening on her network.

Suggested Answer: B

Get Premium 312-38 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

14 comments · newest first

Celestina 12 months ago

I agree, half-open scans are super effective for this!

Pilar 12 months ago

Wait, is this really the best way to check for live hosts?

Leonie 12 months ago

I thought RST scans were a thing?

Kirk 1 year ago

Definitely a SYN scan, right?

Eva 1 year ago

She's doing a half-open scan, classic technique!

Douglass 1 year ago

I keep mixing up the XMAS scan and half-open scan. I think the XMAS scan involves sending packets with all flags set, but this doesn't sound like that.

Melvin 1 year ago

I practiced a similar question, and I believe it's a half-open scan since she sends RST packets after receiving SYN/ACK responses.

Lettie 1 year ago

I'm not entirely sure, but I thought a NULL scan was when you send packets with no flags set. This seems different.

Rashad 1 year ago

I think this is a half-open scan, right? I remember it being about sending SYN packets and not completing the handshake.

Jaime 1 year ago

This seems like a straightforward question about web templates. I'm pretty confident I know the definition, so I'll go with option A.

Frederic 1 year ago

Okay, let me break this down. The key is identifying the Cisco product that is the central hub for network management, control, and analytics. I think I know the answer, but I'll double-check the options.

Blair 1 year ago

Okay, let's see. The customer's website was hacked even though they had Alibaba Cloud WAF enabled. The question is asking what actions they should take to ensure WAF functions correctly and enhance security. I think I have a good handle on this.

Avery 1 year ago

Okay, let's see here. The key is to focus on the fact that the company doesn't have any developers on staff. That means they need a low-code/no-code solution, which is where Power Platform shines. I'll highlight the ability to create custom apps and integrate data between Microsoft 365 and Dynamics 365.

Kathrine 1 year ago

I remember something similar in our practice questions, but the exact term escapes me. It might be guide time?

EC-Council 312-38 Exam - Topic 1 Question 26 Discussion