Eccouncil ECSAv10 Exam - Topic 3 Question 62 Discussion

Actual exam question for Eccouncil's ECSAv10 exam

Question #: 62
Topic #: 3

An external intrusion test and analysis identify security weaknesses and strengths of the client's systems and networks as they appear from outside the client's security perimeter, usually from the Internet.

The goal of an external intrusion test and analysis is to demonstrate the existence of known vulnerabilities that could be exploited by an external attacker.

During external penetration testing, which of the following scanning techniques allow you to determine a port's state without making a full connection to the host?

AXMAS Scan

BSYN scan

CFIN Scan

DNULL Scan

Show Suggested Answer

Suggested Answer: D

by Roxane at Jan 27, 2024, 10:46 PM

Limited Time Offer

25%

Off

Get Premium ECSAv10 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Rose

9 months ago

Wait, can you really determine a port's state without a full connection? Sounds sketchy!

upvoted 0 times

...

Michel

9 months ago

Definitely agree, SYN scan is the most common method.

upvoted 0 times

...

Rolf

10 months ago

XMAS scan can be tricky, but it works too!

upvoted 0 times

...

Gary

10 months ago

I thought FIN scans were more effective for that?

upvoted 0 times

...

Vallie

10 months ago

SYN scan is the way to go for stealth!

upvoted 0 times

...

Michel

10 months ago

The FIN scan and NULL scan were also discussed in class, but I’m confused about their specific uses in this context.

upvoted 0 times

...

Vicente

11 months ago

I have a vague recollection of the XMAS scan, but I can't remember if it actually fits this scenario.

upvoted 0 times

...

Jamal

11 months ago

I think the SYN scan is the one that allows you to check the port state stealthily. It was mentioned in a practice question we did last week.

upvoted 0 times

...

Judy

11 months ago

I remember studying the different scanning techniques, but I'm not entirely sure which one is best for determining a port's state without a full connection.

upvoted 0 times

...

Raymon

11 months ago

The question is asking about scanning techniques that don't require a full connection. I'm pretty sure the SYN scan is the right answer here.

upvoted 0 times

...

Renea

11 months ago

Okay, let me review the information again. I think the FIN scan might be the best option, but I'm not 100% confident.

upvoted 0 times

...

Asha

11 months ago

The key is to determine which scanning technique can identify a port's state without fully connecting to the host. I'm leaning towards the NULL scan.

upvoted 0 times

...

Stephaine

11 months ago

This question seems straightforward. I think the XMAS scan is the way to go here.

upvoted 0 times

...

Elenore

11 months ago

Hmm, I'm not too sure about this one. I'll have to think it through carefully.

upvoted 0 times

...

Freeman

11 months ago

Hmm, I'm a bit confused. Sending a detailed outline in the text message could work, but I'm not sure if that's the most appropriate approach for a confidential, urgent proposal.

upvoted 0 times

...

Jeannine

11 months ago

Hmm, let me think this through. I know dimensions are the attributes we use to analyze the data, and measures are the numeric values we want to analyze. Okay, let's see - we have Year, Product Number, Country, and Order Number, so those seem like dimensions. And we have Sales Amount, which is the measure. So I'm going to go with option B, two dimensions and three measures.

upvoted 0 times

...

Queenie

1 year ago

XMAS Scan, huh? Sounds like a fun way to spread some holiday cheer while testing the security. Decking the halls with boughs of hacking, fa la la la la, la la la la!

upvoted 0 times

Carline

1 year ago

Definitely not the kind of holiday cheer most people think of, but it's crucial for keeping systems secure. Gotta watch out for those vulnerabilities!

upvoted 0 times

...

Heike

1 year ago

Yeah, it does sound festive, but it's actually a method to identify open ports without completing a full connection. It's important for security testing.

upvoted 0 times

...

Luis

1 year ago

Ha! That's a creative way to think about it. But in reality, XMAS Scan is a serious scanning technique used in penetration testing.

upvoted 0 times

...

Tennie

1 year ago

NULL Scan, all the way! It's like the ninja of scanning techniques - sneaky and silent. I bet it drives the firewall admins crazy trying to figure out what's happening.

upvoted 0 times

Arthur

1 year ago

Firewall admins must have a hard time detecting NULL Scans. It's like trying to catch a ghost.

upvoted 0 times

...

Carlota

1 year ago

Yeah, NULL Scan is like a silent assassin. It can reveal so much without making a sound.

upvoted 0 times

...

Dudley

1 year ago

I agree, NULL Scan is definitely the ninja of scanning techniques. It's so stealthy!

upvoted 0 times

...

Refugia

1 year ago

D) NULL Scan

upvoted 0 times

...

Tiffiny

1 year ago

C) FIN Scan

upvoted 0 times

...

Stefania

1 year ago

B) SYN scan

upvoted 0 times

...

Alex

1 year ago

A) XMAS Scan

upvoted 0 times

...

Marva

1 year ago

Hmm, the FIN Scan sounds interesting. I wonder if it's a more stealthy approach compared to the SYN scan. Gotta keep those security professionals on their toes, right?

upvoted 0 times

...

Howard

1 year ago

I'm not sure, but I think XMAS Scan is also a scanning technique that can be used for this purpose.

upvoted 0 times

...

Edgar

1 year ago

I agree with Jarvis, SYN scan is used to determine a port's state without making a full connection.

upvoted 0 times

...

Delpha

1 year ago

SYN scan is the way to go! It's a classic technique that allows you to determine a port's state without making a full connection. Efficient and effective, just the way I like it.

upvoted 0 times