All the web servers in the DMZ respond to ACK scan on port 80. Why is this happening ?
Suggested Answer: D
Get Premium CPEH-001 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
If they used a stateful inspection firewall this firewall would know if there has been a SYN-ACK before the ACK.
12 comments · newest first
XU
Xuan
12 months ago
I agree, stateful firewalls should be a standard by now!
TE
Terina
12 months ago
Wait, are we sure they're all responding like that? Seems odd.
IL
Ilona
1 year ago
I think it's more about the lack of IDS, honestly.
SA
Sanjuana
1 year ago
Definitely a Windows thing, they tend to be more open.
DI
Diego
1 year ago
Sounds like a classic case of no stateful firewall.
MI
Miles
1 year ago
I feel like this could relate to the operating system, but I can't recall if Windows or Unix is more likely to respond this way.
NI
Nickole
1 year ago
I think we practiced a question about stateful vs. stateless firewalls. If they're not using a stateful firewall, that might explain the ACK responses on port 80.
KE
Kenia
1 year ago
I remember reading that ACK scans can sometimes indicate a lack of proper firewall configurations, but I'm not sure which option that points to.
MA
Margo
1 year ago
I’m leaning towards the idea that the company might not have an IDS in place, but I’m not completely confident about how that connects to the ACK scan.
MI
Miss
1 year ago
I'm feeling pretty confident about this one. I just need to match up the data sources with the specific requirements outlined in the question.
SH
Sharee
1 year ago
I'm a little confused by the wording of this question. Are they asking about the specific purpose of each budget type, or just the general characteristics? I'll have to read through the options again to make sure I understand what they're looking for.
AL
Almeta
1 year ago
Consulting key stakeholders is definitely the most important consideration here. The CIO needs to get buy-in from the business leaders to make any significant changes to the IT strategy.