Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Eccouncil 312-38 Exam - Topic 1 Question 26 Discussion

Cindy is the network security administrator for her company. She just got back from a security conference in Las Vegas where they talked about all kinds of old and new security threats; many of which she did not know of. She is worried about the current security state of her company's network so she decides to start scanning the network from an external IP address. To see how some of the hosts on her network react, she sends out SYN packets to an IP range. A number of IPs responds with a SYN/ACK response. Before the connection is established, she sends RST packets to those hosts to stop the session. She has done this to see how her intrusion detection system will log the traffic. What type of scan is Cindy attempting here?
B) Cindy is using a half-open scan to find live hosts on her network.
A) The type of scan she is usinq is called a NULL scan.
C) Cindy is attempting to find live hosts on her company's network by using a XMAS scan.
D) She is utilizing a RST scan to find live hosts that are listening on her network.

Eccouncil 312-38 Exam - Topic 1 Question 26 Discussion

Actual exam question for Eccouncil's 312-38 exam
Question #: 26
Topic #: 1
[All 312-38 Questions]

Cindy is the network security administrator for her company. She just got back from a security conference in Las Vegas where they talked about all kinds of old and new security threats; many of which she did not know of. She is worried about the current security state of her company's network so she decides to start scanning the network from an external IP address. To see how some of the hosts on her network react, she sends out SYN packets to an IP range. A number of IPs responds with a SYN/ACK response. Before the connection is established, she sends RST packets to those hosts to stop the session. She has done this to see how her intrusion detection system will log the traffic. What type of scan is Cindy attempting here?

Show Suggested Answer Hide Answer
Suggested Answer: B

by Lai at May 05, 2022, 10:29 AM

Limited Time Offer

25%

Off

Get Premium 312-38 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Celestina
10 months ago
I agree, half-open scans are super effective for this!
upvoted 0 times
...
Pilar
10 months ago
Wait, is this really the best way to check for live hosts?
upvoted 0 times
...
Leonie
10 months ago
I thought RST scans were a thing?
upvoted 0 times
...
Kirk
11 months ago
Definitely a SYN scan, right?
upvoted 0 times
...
Eva
11 months ago
She's doing a half-open scan, classic technique!
upvoted 0 times
...
Douglass
11 months ago
I keep mixing up the XMAS scan and half-open scan. I think the XMAS scan involves sending packets with all flags set, but this doesn't sound like that.
upvoted 0 times
...
Melvin
11 months ago
I practiced a similar question, and I believe it's a half-open scan since she sends RST packets after receiving SYN/ACK responses.
upvoted 0 times
...
Lettie
11 months ago
I'm not entirely sure, but I thought a NULL scan was when you send packets with no flags set. This seems different.
upvoted 0 times
...
Rashad
11 months ago
I think this is a half-open scan, right? I remember it being about sending SYN packets and not completing the handshake.
upvoted 0 times
...
Jaime
11 months ago
This seems like a straightforward question about web templates. I'm pretty confident I know the definition, so I'll go with option A.
upvoted 0 times
...
Frederic
11 months ago
Okay, let me break this down. The key is identifying the Cisco product that is the central hub for network management, control, and analytics. I think I know the answer, but I'll double-check the options.
upvoted 0 times
...
Blair
11 months ago
Okay, let's see. The customer's website was hacked even though they had Alibaba Cloud WAF enabled. The question is asking what actions they should take to ensure WAF functions correctly and enhance security. I think I have a good handle on this.
upvoted 0 times
...
Avery
11 months ago
Okay, let's see here. The key is to focus on the fact that the company doesn't have any developers on staff. That means they need a low-code/no-code solution, which is where Power Platform shines. I'll highlight the ability to create custom apps and integrate data between Microsoft 365 and Dynamics 365.
upvoted 0 times
...
Kathrine
11 months ago
I remember something similar in our practice questions, but the exact term escapes me. It might be guide time?
upvoted 0 times
...

Save Cancel