Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Eccouncil 312-38 Exam - Topic 9 Question 17 Discussion

Mark is monitoring the network traffic on his organization's network. He wants to detect a TCP and UDP ping sweep on his network. Which type of filter will be used to detect this on the network?
D) Tcp.dstport==7 and udp.dstport==7
A) Tcp.srcport==7 and udp.srcport==7
B) Tcp.srcport==7 and udp.dstport==7
C) Tcp.dstport==7 and udp.srcport==7

Eccouncil 312-38 Exam - Topic 9 Question 17 Discussion

Actual exam question for Eccouncil's 312-38 exam
Question #: 17
Topic #: 9
[All 312-38 Questions]

Mark is monitoring the network traffic on his organization's network. He wants to detect a TCP and UDP ping sweep on his network. Which type of filter will be used to detect this on the network?

Show Suggested Answer Hide Answer
Suggested Answer: D

by Sage at May 05, 2022, 10:05 AM

Limited Time Offer

25%

Off

Get Premium 312-38 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Stefany
8 months ago
Not sure about that, I thought it was more complex than just port numbers.
upvoted 0 times
...
Florinda
9 months ago
Definitely going with C, it covers both TCP and UDP.
upvoted 0 times
...
Barrett
9 months ago
Wait, why are we using port 7? Isn't that echo?
upvoted 0 times
...
Polly
9 months ago
I think option B makes more sense, though.
upvoted 0 times
...
Cassie
9 months ago
Option C is the right choice for detecting ping sweeps.
upvoted 0 times
...
Irma
9 months ago
If I remember correctly, option C seems like it could be right since it checks the destination port for TCP and the source port for UDP.
upvoted 0 times
...
Corinne
9 months ago
I think we practiced a similar question, and I recall that the destination ports are usually more relevant for detecting incoming traffic.
upvoted 0 times
...
Queenie
9 months ago
I remember we discussed TCP and UDP sweeps in class, but I'm not sure which filter to use for detecting them.
upvoted 0 times
...
Ma
9 months ago
I'm a bit confused about the ports. I thought both source and destination ports were important, but I can't recall which combination is correct for sweeps.
upvoted 0 times
...
Arthur
10 months ago
Okay, I think the key here is focusing on accessibility for users with disabilities. Let me review the options.
upvoted 0 times
...
Basilia
10 months ago
I'm a bit unsure about the differences between using FQDN and IP addresses. I think I might lean toward A but need more clarity.
upvoted 0 times
...
Veda
10 months ago
I've seen some exam questions mention the connection between user retention and marketing expenses, but I'm still not sure how all these benefits tie together.
upvoted 0 times
...
Olive
10 months ago
Hmm, this looks like a tricky one. I'll need to think through the formula for accrued interest on a coupon bond.
upvoted 0 times
...
Jaime
10 months ago
Hmm, I'm a bit confused about the difference between the procurement category setup and the purchasing policies. I'll need to review those areas carefully.
upvoted 0 times
...
Thora
10 months ago
Hmm, I'm a bit unsure about this one. I know an audit trail is important, but I'm not sure I fully grasp the specific reasons why. I'll need to think through the options carefully.
upvoted 0 times
...

Save Cancel