Bob, a forensic investigator, was instructed to review a Windows machine and identify any anonymous activities performed using it. In this process. Bob used the command ''netstat -ano" to view all the active connections in the system and determined that the connections established by the Tor browser were closed. Which of the following states of the connections established by Tor indicates that the Tor browser is closed?
Suggested Answer: C
Get Premium ECSS Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
39 comments · newest first
RO
Rosalyn
11 months ago
ESTABLISHED means it's still active, so that's a no-go.
DO
Dorothy
11 months ago
Wait, are you sure TIMEWAIT is the correct state? Sounds off.
LA
Lawrence
12 months ago
LISTENING doesn't make sense here, right?
MY
Myong
12 months ago
I thought CLOSE WAIT was the right one, but I guess not!
GE
Gerald
1 year ago
Definitely TIMEWAIT means the Tor browser is closed.
CR
Cristy
1 year ago
"LISTENING" is definitely not the right state for a closed browser, but I can't remember what the others mean exactly.
MA
Marilynn
1 year ago
"TIMEWAIT" sounds familiar, but I can't recall if it means the browser is completely closed or just waiting for a timeout.
CR
Cruz
1 year ago
I think "CLOSE WAIT" might indicate that the connection is in the process of closing, but I'm not entirely sure.
LA
Lauran
1 year ago
I remember that "ESTABLISHED" means the connection is active, so it can't be that one.
YU
Yuette
1 year ago
Okay, let me think this through step-by-step. I need to identify the key elements of an RPA capability vision.
BR
Brett
1 year ago
Okay, I've got this. Periods, accounts, and entities are the three application elements we can import metadata changes for.
DO
Domonique
1 year ago
This question seems straightforward, but I want to make sure I understand the concept of "rights of accumulation" before answering.
SH
Sharika
1 year ago
I'm leaning towards B as well. Performing with minimal supervision seems to indicate a level of understanding beyond just basic knowledge, so Application makes the most sense to me.
KI
King
1 year ago
Haha, Tor browser, eh? Bet those guys are having a field day with this one. I'm gonna go with C, TIMEWAIT, just to mess with 'em!
KA
Karl
1 year ago
D) LISTENING
EL
Elouise
1 year ago
C) TIMEWAIT
MA
Marisha
1 year ago
B) CLOSE WAIT
PA
Paulina
1 year ago
A) ESTABLISHED
LA
Lanie
1 year ago
D) LISTENING
LA
Latia
1 year ago
C) TIMEWAIT
LA
Lai
1 year ago
B) CLOSE WAIT
AR
Argelia
1 year ago
A) ESTABLISHED
LE
Leatha
1 year ago
C) TIMEWAIT
BE
Benedict
1 year ago
B) CLOSE WAIT
FE
Felix
1 year ago
A) ESTABLISHED
SH
Sharee
1 year ago
Ooh, this is a good one. I'm gonna go with D, LISTENING. Wait, no, that doesn't make sense. Uh, let me think about this again... *scratches head*
LI
Lisha
1 year ago
Ah, the old 'netstat -ano' trick. Classic forensics move. I reckon the answer's C, TIMEWAIT. Gotta love those networking protocols, am I right?
HE
Hermila
1 year ago
Hmm, let's see. If the Tor connections are closed, that means they're probably in the CLOSE_WAIT state, right? I'm going with B on this one.
JA
Jacquline
2 years ago
I agree with Gussie, A) ESTABLISHED makes more sense in this context.
GR
Graciela
2 years ago
Well, this is a tricky one. Gotta be on the lookout for those sneaky Tor connections, huh? I'm thinking C, TIMEWAIT, seems like the most logical choice here.
GR
Gretchen
1 year ago
Definitely, TIMEWAIT indicates that the connection is in the process of closing.
DE
Demetra
1 year ago
Yeah, TIMEWAIT seems like the right choice when the Tor browser is closed.
AR
Ardella
1 year ago
I agree with you, C) TIMEWAIT does make sense in this scenario.
SI
Silvana
1 year ago
D) LISTENING
MA
Mammie
1 year ago
C) TIMEWAIT
LE
Lennie
1 year ago
B) CLOSE WAIT
NE
Nettie
1 year ago
A) ESTABLISHED
GU
Gussie
2 years ago
I disagree, I believe the correct answer is A) ESTABLISHED because that indicates the connection is active.
IS
Isreal
2 years ago
I think the answer is B) CLOSE WAIT because the connections were closed.