Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

EC-Council ECSS Exam - Topic 4 Question 64 Discussion

Posted by Ma on Feb 08, 2023 at 07:46 AM

Bob, a forensic investigator, was instructed to review a Windows machine and identify any anonymous activities performed using it. In this process. Bob used the command ''netstat -ano" to view all the active connections in the system and determined that the connections established by the Tor browser were closed. Which of the following states of the connections established by Tor indicates that the Tor browser is closed?

Suggested Answer: C

Get Premium ECSS Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
39 comments · newest first
RO
Rosalyn 11 months ago
ESTABLISHED means it's still active, so that's a no-go.
DO
Dorothy 11 months ago
Wait, are you sure TIMEWAIT is the correct state? Sounds off.
LA
Lawrence 12 months ago
LISTENING doesn't make sense here, right?
MY
Myong 12 months ago
I thought CLOSE WAIT was the right one, but I guess not!
GE
Gerald 1 year ago
Definitely TIMEWAIT means the Tor browser is closed.
CR
Cristy 1 year ago
"LISTENING" is definitely not the right state for a closed browser, but I can't remember what the others mean exactly.
MA
Marilynn 1 year ago
"TIMEWAIT" sounds familiar, but I can't recall if it means the browser is completely closed or just waiting for a timeout.
CR
Cruz 1 year ago
I think "CLOSE WAIT" might indicate that the connection is in the process of closing, but I'm not entirely sure.
LA
Lauran 1 year ago
I remember that "ESTABLISHED" means the connection is active, so it can't be that one.
YU
Yuette 1 year ago
Okay, let me think this through step-by-step. I need to identify the key elements of an RPA capability vision.
BR
Brett 1 year ago
Okay, I've got this. Periods, accounts, and entities are the three application elements we can import metadata changes for.
DO
Domonique 1 year ago
This question seems straightforward, but I want to make sure I understand the concept of "rights of accumulation" before answering.
SH
Sharika 1 year ago
I'm leaning towards B as well. Performing with minimal supervision seems to indicate a level of understanding beyond just basic knowledge, so Application makes the most sense to me.
KI
King 1 year ago
Haha, Tor browser, eh? Bet those guys are having a field day with this one. I'm gonna go with C, TIMEWAIT, just to mess with 'em!
KA
Karl 1 year ago
↳ replying to King
D) LISTENING
EL
Elouise 1 year ago
↳ replying to King
C) TIMEWAIT
MA
Marisha 1 year ago
↳ replying to King
B) CLOSE WAIT
PA
Paulina 1 year ago
↳ replying to King
A) ESTABLISHED
LA
Lanie 1 year ago
↳ replying to King
D) LISTENING
LA
Latia 1 year ago
↳ replying to King
C) TIMEWAIT
LA
Lai 1 year ago
↳ replying to King
B) CLOSE WAIT
AR
Argelia 1 year ago
↳ replying to King
A) ESTABLISHED
LE
Leatha 1 year ago
↳ replying to King
C) TIMEWAIT
BE
Benedict 1 year ago
↳ replying to King
B) CLOSE WAIT
FE
Felix 1 year ago
↳ replying to King
A) ESTABLISHED
SH
Sharee 1 year ago
Ooh, this is a good one. I'm gonna go with D, LISTENING. Wait, no, that doesn't make sense. Uh, let me think about this again... *scratches head*
LI
Lisha 1 year ago
Ah, the old 'netstat -ano' trick. Classic forensics move. I reckon the answer's C, TIMEWAIT. Gotta love those networking protocols, am I right?
HE
Hermila 1 year ago
Hmm, let's see. If the Tor connections are closed, that means they're probably in the CLOSE_WAIT state, right? I'm going with B on this one.
JA
Jacquline 2 years ago
I agree with Gussie, A) ESTABLISHED makes more sense in this context.
GR
Graciela 2 years ago
Well, this is a tricky one. Gotta be on the lookout for those sneaky Tor connections, huh? I'm thinking C, TIMEWAIT, seems like the most logical choice here.
GR
Gretchen 1 year ago
↳ replying to Graciela
Definitely, TIMEWAIT indicates that the connection is in the process of closing.
DE
Demetra 1 year ago
↳ replying to Graciela
Yeah, TIMEWAIT seems like the right choice when the Tor browser is closed.
AR
Ardella 1 year ago
↳ replying to Graciela
I agree with you, C) TIMEWAIT does make sense in this scenario.
SI
Silvana 1 year ago
↳ replying to Graciela
D) LISTENING
MA
Mammie 1 year ago
↳ replying to Graciela
C) TIMEWAIT
LE
Lennie 1 year ago
↳ replying to Graciela
B) CLOSE WAIT
NE
Nettie 1 year ago
↳ replying to Graciela
A) ESTABLISHED
GU
Gussie 2 years ago
I disagree, I believe the correct answer is A) ESTABLISHED because that indicates the connection is active.
IS
Isreal 2 years ago
I think the answer is B) CLOSE WAIT because the connections were closed.
0/2000 characters

Save Cancel