MENU
Firewalking is a technique that can be used to gather information about a remote network protected by a firewall. This technique can be used effectively to perform information gathering attacks. In this technique, an attacker sends a crafted packet with a TTL value that is set to expire one hop past the firewall. Which of the following are pre-requisites for an attacker to conduct firewalking?
Each correct answer represents a complete solution. Choose all that apply.
Suggested Answer: B, C, D
Get Premium ECSS Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
LE
Letha
12 months ago
I thought firewalking was just a myth, but this makes sense!
CR
Craig
12 months ago
ICMP packets must be allowed, no doubt about it!
GI
Giovanna
12 months ago
Wait, do you really need a backdoor for this? Seems off.
RO
Robt
1 year ago
I think knowing the host IP is crucial too.
AN
Andrew
1 year ago
You definitely need the IP of the last gateway!
EL
Elden
1 year ago
I definitely recall that the TTL value is important, but I can't remember if the backdoor is necessary. I thought it was more about the gateway and ICMP rules.
AL
Alyce
1 year ago
I’m a bit confused about whether the attacker needs to know the IP of a host behind the firewall. It seems like it could help, but is it really a prerequisite?
SA
Sabina
1 year ago
I remember practicing a similar question where we discussed the importance of ICMP packets. I feel like they must be allowed for firewalking to work properly.
JE
Jesusa
1 year ago
I think knowing the IP address of the last known gateway is crucial for firewalking, but I'm not entirely sure about the backdoor part.
RO
Rodrigo
1 year ago
Hmm, the key seems to be finding the option that is compatible with the planned design decisions and minimizes the time for image and app updates. I'll need to weigh the pros and cons of each approach.
EM
Emile
1 year ago
I'm feeling pretty confident about this one. The key is that the legal advisors have stated it's probable that HJ will lose the $400,000 case and probable that they'll win the $250,000 case. So we need to provide for the $400,000 outflow and recognize the $250,000 inflow. Option B is the way to go.
IZ
Izetta
1 year ago
Okay, let's see. Subscribing to articles, article versioning, and integration with social networking platforms all sound like standard Knowledge Management features. I'm guessing the answer is D, import from Microsoft Word.