MENU
An external intrusion test and analysis identify security weaknesses and strengths of the client's systems and networks as they appear from outside the client's security perimeter, usually from the Internet.
The goal of an external intrusion test and analysis is to demonstrate the existence of known vulnerabilities that could be exploited by an external attacker.
During external penetration testing, which of the following scanning techniques allow you to determine a port's state without making a full connection to the host?
Suggested Answer: D
Get Premium ECSAv10 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
40 comments · newest first
RO
Rose
11 months ago
Wait, can you really determine a port's state without a full connection? Sounds sketchy!
MI
Michel
11 months ago
Definitely agree, SYN scan is the most common method.
RO
Rolf
11 months ago
XMAS scan can be tricky, but it works too!
GA
Gary
12 months ago
I thought FIN scans were more effective for that?
VA
Vallie
12 months ago
SYN scan is the way to go for stealth!
MI
Michel
1 year ago
The FIN scan and NULL scan were also discussed in class, but I’m confused about their specific uses in this context.
VI
Vicente
1 year ago
I have a vague recollection of the XMAS scan, but I can't remember if it actually fits this scenario.
JA
Jamal
1 year ago
I think the SYN scan is the one that allows you to check the port state stealthily. It was mentioned in a practice question we did last week.
JU
Judy
1 year ago
I remember studying the different scanning techniques, but I'm not entirely sure which one is best for determining a port's state without a full connection.
RA
Raymon
1 year ago
The question is asking about scanning techniques that don't require a full connection. I'm pretty sure the SYN scan is the right answer here.
RE
Renea
1 year ago
Okay, let me review the information again. I think the FIN scan might be the best option, but I'm not 100% confident.
AS
Asha
1 year ago
The key is to determine which scanning technique can identify a port's state without fully connecting to the host. I'm leaning towards the NULL scan.
ST
Stephaine
1 year ago
This question seems straightforward. I think the XMAS scan is the way to go here.
EL
Elenore
1 year ago
Hmm, I'm not too sure about this one. I'll have to think it through carefully.
FR
Freeman
1 year ago
Hmm, I'm a bit confused. Sending a detailed outline in the text message could work, but I'm not sure if that's the most appropriate approach for a confidential, urgent proposal.
JE
Jeannine
1 year ago
Hmm, let me think this through. I know dimensions are the attributes we use to analyze the data, and measures are the numeric values we want to analyze. Okay, let's see - we have Year, Product Number, Country, and Order Number, so those seem like dimensions. And we have Sales Amount, which is the measure. So I'm going to go with option B, two dimensions and three measures.
QU
Queenie
1 year ago
XMAS Scan, huh? Sounds like a fun way to spread some holiday cheer while testing the security. Decking the halls with boughs of hacking, fa la la la la, la la la la!
CA
Carline
1 year ago
Definitely not the kind of holiday cheer most people think of, but it's crucial for keeping systems secure. Gotta watch out for those vulnerabilities!
HE
Heike
1 year ago
Yeah, it does sound festive, but it's actually a method to identify open ports without completing a full connection. It's important for security testing.
LU
Luis
1 year ago
Ha! That's a creative way to think about it. But in reality, XMAS Scan is a serious scanning technique used in penetration testing.
TE
Tennie
2 years ago
NULL Scan, all the way! It's like the ninja of scanning techniques - sneaky and silent. I bet it drives the firewall admins crazy trying to figure out what's happening.
AR
Arthur
1 year ago
Firewall admins must have a hard time detecting NULL Scans. It's like trying to catch a ghost.
CA
Carlota
1 year ago
Yeah, NULL Scan is like a silent assassin. It can reveal so much without making a sound.
DU
Dudley
1 year ago
I agree, NULL Scan is definitely the ninja of scanning techniques. It's so stealthy!
RE
Refugia
1 year ago
D) NULL Scan
TI
Tiffiny
1 year ago
C) FIN Scan
ST
Stefania
1 year ago
B) SYN scan
AL
Alex
1 year ago
A) XMAS Scan
MA
Marva
2 years ago
Hmm, the FIN Scan sounds interesting. I wonder if it's a more stealthy approach compared to the SYN scan. Gotta keep those security professionals on their toes, right?
HO
Howard
2 years ago
I'm not sure, but I think XMAS Scan is also a scanning technique that can be used for this purpose.
ED
Edgar
2 years ago
I agree with Jarvis, SYN scan is used to determine a port's state without making a full connection.
DE
Delpha
2 years ago
SYN scan is the way to go! It's a classic technique that allows you to determine a port's state without making a full connection. Efficient and effective, just the way I like it.
ER
Erick
1 year ago
User 4: I've used SYN scan before, it's a useful method for testing security weaknesses from outside the client's security perimeter.
JA
Janine
1 year ago
User 3: It's important to use the right scanning technique to identify vulnerabilities, SYN scan seems like a reliable option.
TE
Terry
1 year ago
User 2: SYN scan is efficient and effective, it's a great technique to use during external penetration testing.
JE
Jerrod
1 year ago
User 1: I agree, SYN scan is definitely a classic choice for determining a port's state.
JA
Jarvis
2 years ago
I think the answer is B) SYN scan.
PE
Peggie
2 years ago
I'm not sure, but I think XMAS Scan is also a scanning technique that can be used for this purpose.
SH
Sherron
2 years ago
I agree with Stanton, SYN scan is used to determine a port's state without making a full connection.
ST
Stanton
2 years ago
I think the answer is B) SYN scan.