GAQM CPEH-001 Exam - Topic 6 Question 26 Discussion

Actual exam question for GAQM's CPEH-001 exam

Question #: 26
Topic #: 6

You are doing IP spoofing while you scan your target. You find that the target has port 23 open. Anyway you are unable to connect. Why?

AA firewall is blocking port 23

BYou cannot spoof + TCP

CYou need an automated telnet tool

DThe OS does not reply to telnet even if port 23 is open

Show Suggested Answer

Suggested Answer: A

The question is not telling you what state the port is being reported by the scanning utility, if the program used to conduct this is nmap, nmap will show you one of three states -- ''open'', ''closed'', or ''filtered'' a port can be in an ''open'' state yet filtered, usually by a stateful packet inspection filter (ie. Netfilter for linux, ipfilter for bsd). C and D to make any sense for this question, their bogus, and B, ''You cannot spoof + TCP'', well you can spoof + TCP, so we strike that out.

by Derick at May 03, 2022, 09:06 AM

Limited Time Offer

25%

Off

Get Premium CPEH-001 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Yoko

4 months ago

Not sure about needing an automated tool, seems like overkill.

upvoted 0 times

...

Gwen

4 months ago

Wait, so even if port 23 is open, it might not respond? That's surprising!

upvoted 0 times

...

Jarod

4 months ago

You can't spoof TCP connections, that's a fact.

upvoted 0 times

...

Chana

4 months ago

Definitely a firewall issue, I agree!

upvoted 0 times

...

Victor

5 months ago

Port 23 is usually telnet, but it might be disabled.

upvoted 0 times

...

Malcolm

5 months ago

I practiced a similar question where the OS didn't respond even if the port was open, so D could be the right answer.

upvoted 0 times

...

Blythe

5 months ago

I'm not entirely sure, but I think TCP connections require a proper handshake, and spoofing might mess that up.

upvoted 0 times

...

Gerald

5 months ago

I remember reading that firewalls can block specific ports, so option A seems plausible.

upvoted 0 times

...

Rosann

5 months ago

I feel like using an automated tool might help, but I can't recall if that's necessary for telnet connections.

upvoted 0 times

...

Nobuko

5 months ago

Ah, I've seen this before. Assigning the right permission set should do the trick. I'll make sure the user has the necessary access.

upvoted 0 times

...

Karma

5 months ago

Ah, I see the challenge here. Preventing new sessions without disrupting active ones is tricky. Enabling JIT VM access could be a potential solution, but I'll need to carefully review the details to ensure it aligns with the requirements.

upvoted 0 times

...