Eccouncil Exam ECSS Topic 4 Question 64 Discussion

Actual exam question for Eccouncil's ECSS exam

Question #: 64
Topic #: 4

[All ECSS Questions]

Bob, a forensic investigator, was instructed to review a Windows machine and identify any anonymous activities performed using it. In this process. Bob used the command ''netstat -ano" to view all the active connections in the system and determined that the connections established by the Tor browser were closed. Which of the following states of the connections established by Tor indicates that the Tor browser is closed?

AESTABLISHED

BCLOSE WAIT

CTIMEWAIT

DLISTENING

Show Suggested Answer

Suggested Answer: C

by Ma at Feb 08, 2023, 07:46 AM

Limited Time Offer

25%

Off

Get Premium ECSS Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Jacquline

3 days ago

I agree with Gussie, A) ESTABLISHED makes more sense in this context.

upvoted 0 times

...

Graciela

9 days ago

Well, this is a tricky one. Gotta be on the lookout for those sneaky Tor connections, huh? I'm thinking C, TIMEWAIT, seems like the most logical choice here.

upvoted 0 times

...

Gussie

11 days ago

I disagree, I believe the correct answer is A) ESTABLISHED because that indicates the connection is active.

upvoted 0 times

...

Isreal

18 days ago

I think the answer is B) CLOSE WAIT because the connections were closed.

upvoted 0 times

...