Eccouncil 312-38 Exam - Topic 1 Question 26 Discussion

Actual exam question for Eccouncil's 312-38 exam

Question #: 26
Topic #: 1

Cindy is the network security administrator for her company. She just got back from a security conference in Las Vegas where they talked about all kinds of old and new security threats; many of which she did not know of. She is worried about the current security state of her company's network so she decides to start scanning the network from an external IP address. To see how some of the hosts on her network react, she sends out SYN packets to an IP range. A number of IPs responds with a SYN/ACK response. Before the connection is established, she sends RST packets to those hosts to stop the session. She has done this to see how her intrusion detection system will log the traffic. What type of scan is Cindy attempting here?

AThe type of scan she is usinq is called a NULL scan.

BCindy is using a half-open scan to find live hosts on her network.

CCindy is attempting to find live hosts on her company's network by using a XMAS scan.

DShe is utilizing a RST scan to find live hosts that are listening on her network.

Show Suggested Answer

Suggested Answer: B

by Lai at May 05, 2022, 10:29 AM

Limited Time Offer

25%

Off

Get Premium 312-38 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Celestina

4 months ago

I agree, half-open scans are super effective for this!

upvoted 0 times

...

Pilar

4 months ago

Wait, is this really the best way to check for live hosts?

upvoted 0 times

...

Leonie

4 months ago

I thought RST scans were a thing?

upvoted 0 times

...

Kirk

4 months ago

Definitely a SYN scan, right?

upvoted 0 times

...

Eva

5 months ago

She's doing a half-open scan, classic technique!

upvoted 0 times

...

Douglass

5 months ago

I keep mixing up the XMAS scan and half-open scan. I think the XMAS scan involves sending packets with all flags set, but this doesn't sound like that.

upvoted 0 times

...

Melvin

5 months ago

I practiced a similar question, and I believe it's a half-open scan since she sends RST packets after receiving SYN/ACK responses.

upvoted 0 times

...

Lettie

5 months ago

I'm not entirely sure, but I thought a NULL scan was when you send packets with no flags set. This seems different.

upvoted 0 times

...

Rashad

5 months ago

I think this is a half-open scan, right? I remember it being about sending SYN packets and not completing the handshake.

upvoted 0 times

...

Jaime

5 months ago

This seems like a straightforward question about web templates. I'm pretty confident I know the definition, so I'll go with option A.

upvoted 0 times

...

Frederic

5 months ago

Okay, let me break this down. The key is identifying the Cisco product that is the central hub for network management, control, and analytics. I think I know the answer, but I'll double-check the options.

upvoted 0 times

...

Blair

5 months ago

Okay, let's see. The customer's website was hacked even though they had Alibaba Cloud WAF enabled. The question is asking what actions they should take to ensure WAF functions correctly and enhance security. I think I have a good handle on this.

upvoted 0 times

...

Avery

5 months ago

Okay, let's see here. The key is to focus on the fact that the company doesn't have any developers on staff. That means they need a low-code/no-code solution, which is where Power Platform shines. I'll highlight the ability to create custom apps and integrate data between Microsoft 365 and Dynamics 365.

upvoted 0 times

...

Kathrine

5 months ago

I remember something similar in our practice questions, but the exact term escapes me. It might be guide time?

upvoted 0 times

...