Eccouncil Exam 312-38 Topic 6 Question 89 Discussion

Actual exam question for Eccouncil's 312-38 exam

Question #: 89
Topic #: 6

[All 312-38 Questions]

How can one identify the baseline for normal traffic?

AWhen the ACK flag appears at the beginning and the RST flag appears at the end of the connection

BWhen the SYN flag appears at the beginning and the FIN flag appears at the end of the connection

CWhen the RST flag appears at the beginning and the ACK flag appears at the end of the connection

DWhen the FIN flag appears at the beginning and the SYN flag appears at the end of the connection

Show Suggested Answer

Suggested Answer: B

Circuit-level gateway firewall technology operates at the session layer of the OSI model. This type of firewall validates TCP or UDP sessions before allowing traffic through, without inspecting the contents of the data packets. It acts as a handshaking device between trusted clients or servers and untrusted hosts, ensuring that the session packets adhere to established rules for a connection.The session layer, which is Layer 5 in the OSI model, is responsible for setting up, managing, and terminating the connections between applications1234.

by Aja at Aug 07, 2024, 10:00 PM

Limited Time Offer

25%

Off

Get Premium 312-38 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Billi

11 days ago

I think the correct answer is C) When the RST flag appears at the beginning and the ACK flag appears at the end of the connection. This makes more sense in terms of establishing a baseline for normal traffic.

upvoted 0 times

...

Lonna

13 days ago

I disagree, I believe it's when the ACK flag appears at the beginning and the RST flag appears at the end of the connection.

upvoted 0 times

...

Billi

14 days ago

I think the baseline for normal traffic is when the SYN flag appears at the beginning and the FIN flag appears at the end of the connection.

upvoted 0 times

...