Eccouncil ECSAv10 Exam - Topic 8 Question 66 Discussion

Actual exam question for Eccouncil's ECSAv10 exam

Question #: 66
Topic #: 8

You are running through a series of tests on your network to check for any security vulnerabilities. After normal working hours, you initiate a DoS attack against your external firewall. The firewall quickly freezes up and becomes unusable.

You then initiate an FTP connection from an external IP into your internal network. The connection is successful even though you have FTP blocked at the external firewall. What has happened?

AThe firewall failed-open

BThe firewall failed-bypass

CThe firewall failed-closed

DThe firewall ACL has been purged

Show Suggested Answer

Suggested Answer: A

by Lenna at Apr 09, 2024, 09:28 AM

Limited Time Offer

25%

Off

Get Premium ECSAv10 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Jolanda

3 months ago

The ACL being purged seems unlikely, right?

upvoted 0 times

...

Regenia

3 months ago

Could be a fail-bypass, but I lean towards fail-open.

upvoted 0 times

...

Markus

3 months ago

Wait, how can FTP still connect if it's blocked?

upvoted 0 times

...

Thora

4 months ago

I agree, definitely a fail-open issue.

upvoted 0 times

...

Na

4 months ago

Sounds like a classic fail-open scenario.

upvoted 0 times

...

Truman

4 months ago

The idea of the ACL being purged seems unlikely, but I guess it could explain the FTP connection. I need to think this through more.

upvoted 0 times

...

Marjory

4 months ago

I’m a bit confused. I thought "failed-closed" would mean it blocks everything, but that doesn’t seem to fit here.

upvoted 0 times

...

Nathan

4 months ago

I think if the firewall is bypassing rules, it might be "failed-bypass." That sounds familiar from our practice tests.

upvoted 0 times

...

Terrilyn

5 months ago

I remember something about firewalls failing in different modes, but I'm not sure what "failed-open" means exactly.

upvoted 0 times

...

Chara

5 months ago

Based on the details provided, I think the most likely answer is B - the firewall failed-bypass. That would allow the FTP connection to succeed even with the normal firewall rules in place.

upvoted 0 times

...

Cordelia

5 months ago

I'm a bit confused on this one. The firewall freezing up is concerning, but I'm not sure how that relates to the FTP connection working. I'll need to review the firewall failure modes more closely.

upvoted 0 times

...

Maurine

5 months ago

I'm pretty confident the answer is B - the firewall failed-bypass. That would explain how the FTP connection was successful even with the firewall blocking it normally.

upvoted 0 times

...

Ty

5 months ago

Okay, let's see. The firewall freezing up during the DoS attack is a clear sign of a problem. I'm guessing the answer has to do with how the firewall handles failures.

upvoted 0 times

...

Pamella

5 months ago

Hmm, this seems like a tricky one. I'll need to think carefully about the different firewall failure modes and how they could impact the FTP connection.

upvoted 0 times

...

Beckie

5 months ago

I'm pretty confident that the Rebuild Address Locator tool is the one we want to use here. That should allow us to update the rule base and then re-generate the address locator with the new abbreviation.

upvoted 0 times

...

Thomasena

5 months ago

Hmm, I'm not totally sure about this one. The options seem pretty similar, but I'm leaning towards D, "Negotiate expectations". That feels like the most direct way to describe the process described in the question.

upvoted 0 times

...

Tegan

5 months ago

Ugh, these business continuity questions always trip me up. I'm going to have to review my notes and try to remember the differences between these metrics.

upvoted 0 times

...

Howard

5 months ago

I'm a little confused by this question. Is there some additional context I'm missing about the web client and the bot launcher? I want to make sure I understand the full process before selecting an answer.

upvoted 0 times

...

Luz

5 months ago

Okay, let me see. I remember learning about LeCorbusier and his vision for an ideal, modernist city layout. I think that's the "Radiant City" they're referring to in the question. I'll go with B for LeCorbusier.

upvoted 0 times

...

Meaghan

2 years ago

I agree with In a failed-open situation, the firewall allows all traffic through when it should be blocking it.

upvoted 0 times

...

Sean

2 years ago

I believe it's a failed-open scenario. The firewall let the FTP connection through despite the block.

upvoted 0 times

...

Alida

2 years ago

Do you think the firewall failed-open or failed-closed?

upvoted 0 times

...

Edmond

2 years ago

That's concerning. It shouldn't have allowed the FTP connection if it has FTP blocked.

upvoted 0 times

...

Alida

2 years ago

I can't believe the firewall froze up during the DoS attack.

upvoted 0 times

...

Kenny

2 years ago

I don't think so, if the FTP connection bypassed the firewall, it wouldn't be successful.

upvoted 0 times

...

Marisha

2 years ago

But could it also be the firewall failed-bypass?

upvoted 0 times

...

Avery

2 years ago

I agree, the firewall must have failed-open for the FTP connection to be successful.

upvoted 0 times

...

Nettie

2 years ago

I think the firewall failed-open.

upvoted 0 times

Merlyn

2 years ago

So, even though FTP is blocked, it still allowed the connection because of the failed-open state.

upvoted 0 times

...

Nan

2 years ago

That's right. In a failed-open state, the firewall allows all traffic to pass through.

upvoted 0 times

...

Trina

2 years ago

It looks like the firewall failed-open.

upvoted 0 times

...

Tarra

2 years ago

I'm starting to get a little nervous about this exam. I mean, who knows what kind of crazy scenarios they're going to throw at us? But this one, with the DoS attack and the FTP connection, that's just wild. I'm thinking the answer is C - the firewall failed-closed.

upvoted 0 times

...

Fidelia

2 years ago

This question is like a punch in the gut. Who in their right mind would run a DoS attack on their own network? That's just begging for trouble. But hey, at least it's not on the exam, right? As for the answer, I'm leaning towards B - the firewall failed-bypass.

upvoted 0 times

...

Tambra

2 years ago

Okay, so we've got a firewall that's freezing up and an FTP connection that's working when it shouldn't be. Sounds like a real mess. I'm thinking the answer is D - the firewall ACL has been purged. That would explain why the FTP connection was able to get through.

upvoted 0 times

...

Luann

2 years ago

Dude, this question is giving me a headache. I mean, who even does that kind of testing on a live network? That's just asking for trouble. But if I had to pick an answer, I'd say C - the firewall failed-closed. That would make the most sense to me.

upvoted 0 times

...

Gladys

2 years ago

Hold up, a DoS attack on the firewall? That's some serious stuff. I'm thinking the firewall failed-open (A), which would explain why the FTP connection went through even though it's supposed to be blocked.

upvoted 0 times

...

Shantell

2 years ago

Whoa, this question is intense! A DoS attack on the firewall that makes it freeze up? That's no good. As for the FTP connection, I'm gonna go with B - the firewall failed-bypass. That's the only one that makes sense to me.

upvoted 0 times

...