Eccouncil Exam ECSAv10 Topic 3 Question 62 Discussion

Actual exam question for Eccouncil's ECSAv10 exam

Question #: 62
Topic #: 3

An external intrusion test and analysis identify security weaknesses and strengths of the client's systems and networks as they appear from outside the client's security perimeter, usually from the Internet.

The goal of an external intrusion test and analysis is to demonstrate the existence of known vulnerabilities that could be exploited by an external attacker.

During external penetration testing, which of the following scanning techniques allow you to determine a port's state without making a full connection to the host?

AXMAS Scan

BSYN scan

CFIN Scan

DNULL Scan

Show Suggested Answer

Suggested Answer: D

by Roxane at Jan 27, 2024, 10:46 PM

Limited Time Offer

25%

Off

Get Premium ECSAv10 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Queenie

3 months ago

XMAS Scan, huh? Sounds like a fun way to spread some holiday cheer while testing the security. Decking the halls with boughs of hacking, fa la la la la, la la la la!

upvoted 0 times

Carline

2 months ago

Definitely not the kind of holiday cheer most people think of, but it's crucial for keeping systems secure. Gotta watch out for those vulnerabilities!

upvoted 0 times

...

Heike

2 months ago

Yeah, it does sound festive, but it's actually a method to identify open ports without completing a full connection. It's important for security testing.

upvoted 0 times

...

Luis

2 months ago

Ha! That's a creative way to think about it. But in reality, XMAS Scan is a serious scanning technique used in penetration testing.

upvoted 0 times

...

Tennie

3 months ago

NULL Scan, all the way! It's like the ninja of scanning techniques - sneaky and silent. I bet it drives the firewall admins crazy trying to figure out what's happening.

upvoted 0 times

Arthur

1 months ago

Firewall admins must have a hard time detecting NULL Scans. It's like trying to catch a ghost.

upvoted 0 times

...

Carlota

1 months ago

Yeah, NULL Scan is like a silent assassin. It can reveal so much without making a sound.

upvoted 0 times

...

Dudley

2 months ago

I agree, NULL Scan is definitely the ninja of scanning techniques. It's so stealthy!

upvoted 0 times

...

Refugia

2 months ago

D) NULL Scan

upvoted 0 times

...

Tiffiny

2 months ago

C) FIN Scan

upvoted 0 times

...

Stefania

2 months ago

B) SYN scan

upvoted 0 times

...

Alex

2 months ago

A) XMAS Scan

upvoted 0 times

...

Marva

3 months ago

Hmm, the FIN Scan sounds interesting. I wonder if it's a more stealthy approach compared to the SYN scan. Gotta keep those security professionals on their toes, right?

upvoted 0 times

...

Howard

3 months ago

I'm not sure, but I think XMAS Scan is also a scanning technique that can be used for this purpose.

upvoted 0 times

...

Edgar

3 months ago

I agree with Jarvis, SYN scan is used to determine a port's state without making a full connection.

upvoted 0 times

...

Delpha

3 months ago

SYN scan is the way to go! It's a classic technique that allows you to determine a port's state without making a full connection. Efficient and effective, just the way I like it.

upvoted 0 times