Eccouncil ECSS Exam - Topic 4 Question 28 Discussion

Actual exam question for Eccouncil's ECSS exam

Question #: 28
Topic #: 4

Firewalking is a technique that can be used to gather information about a remote network protected by a firewall. This technique can be used effectively to perform information gathering attacks. In this technique, an attacker sends a crafted packet with a TTL value that is set to expire one hop past the firewall. Which of the following are pre-requisites for an attacker to conduct firewalking?

Each correct answer represents a complete solution. Choose all that apply.

AThere should be a backdoor installed on the network.

BAn attacker should know the IP address of a host located behind the firewall.

CAn attacker should know the IP address of the last known gateway before the firewall.

DICMP packets leaving the network should be allowed.

Show Suggested Answer

Suggested Answer: B, C, D

by Salome at May 07, 2022, 06:38 PM

Limited Time Offer

25%

Off

Get Premium ECSS Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Letha

7 months ago

I thought firewalking was just a myth, but this makes sense!

upvoted 0 times

...

Craig

7 months ago

ICMP packets must be allowed, no doubt about it!

upvoted 0 times

...

Giovanna

7 months ago

Wait, do you really need a backdoor for this? Seems off.

upvoted 0 times

...

Robt

8 months ago

I think knowing the host IP is crucial too.

upvoted 0 times

...

Andrew

8 months ago

You definitely need the IP of the last gateway!

upvoted 0 times

...

Elden

8 months ago

I definitely recall that the TTL value is important, but I can't remember if the backdoor is necessary. I thought it was more about the gateway and ICMP rules.

upvoted 0 times

...

Alyce

8 months ago

I’m a bit confused about whether the attacker needs to know the IP of a host behind the firewall. It seems like it could help, but is it really a prerequisite?

upvoted 0 times

...

Sabina

8 months ago

I remember practicing a similar question where we discussed the importance of ICMP packets. I feel like they must be allowed for firewalking to work properly.

upvoted 0 times

...

Jesusa

8 months ago

I think knowing the IP address of the last known gateway is crucial for firewalking, but I'm not entirely sure about the backdoor part.

upvoted 0 times

...

Rodrigo

8 months ago

Hmm, the key seems to be finding the option that is compatible with the planned design decisions and minimizes the time for image and app updates. I'll need to weigh the pros and cons of each approach.

upvoted 0 times

...

Emile

8 months ago

I'm feeling pretty confident about this one. The key is that the legal advisors have stated it's probable that HJ will lose the $400,000 case and probable that they'll win the $250,000 case. So we need to provide for the $400,000 outflow and recognize the $250,000 inflow. Option B is the way to go.

upvoted 0 times

...

Izetta

8 months ago

Okay, let's see. Subscribing to articles, article versioning, and integration with social networking platforms all sound like standard Knowledge Management features. I'm guessing the answer is D, import from Microsoft Word.

upvoted 0 times

...