Independence Day Deal! Unlock 25% OFF Today – Limited-Time Offer - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GIAC Exam GCED Topic 8 Question 45 Discussion

Actual exam question for GIAC's GCED exam
Question #: 45
Topic #: 8
[All GCED Questions]

When running a Nmap UDP scan, what would the following output indicate?

Show Suggested Answer Hide Answer
Suggested Answer: C

In a case study of a redirect tunnel set up on a router, some anomalies were noticed while watching network traffic with the TCPdump packet sniffer.

Packets going to port 25 (Simple Mail Transfer Protocol [SMTP] used by mail servers and other Mail Transfer Agents [MTAs] to send and receive e-mail) were apparently taking a different network path. The TLs were consistently three less than other destination ports, indicating another three network hops were taken.

Other IP header values listed, such as fragment offset. The acknowledgement number is a TCP, not IP, header field.


Contribute your Thoughts:

Kristeen
1 months ago
I'm going with C. An ICMP unreachable message was received indicating an open port. That's the only one that really makes sense to me.
upvoted 0 times
Eden
8 days ago
I agree with you, C) An ICMP unreachable message was received indicating an open port seems to be the correct answer.
upvoted 0 times
...
India
9 days ago
I'm leaning towards B) The router in front of the host accepted the request and sent a reply.
upvoted 0 times
...
Vashti
11 days ago
I think A) The port may be open on the system or blocked by a firewall is more likely.
upvoted 0 times
...
...
Margery
2 months ago
Ha! I bet the person who wrote this question is a real prankster. They're trying to trick us with these answers.
upvoted 0 times
Azalee
6 days ago
C) An ICMP unreachable message was received indicating an open port
upvoted 0 times
...
Tabetha
9 days ago
B) The router in front of the host accepted the request and sent a reply
upvoted 0 times
...
Gilma
1 months ago
A) The port may be open on the system or blocked by a firewall
upvoted 0 times
...
...
Mertie
2 months ago
Wait, are you sure? I thought the correct answer was A. The port may be open on the system or blocked by a firewall. I'm a bit confused here.
upvoted 0 times
Cory
17 days ago
I'm not entirely sure, but I believe it could be either A or C. It depends on the specific situation.
upvoted 0 times
...
Desirae
27 days ago
Actually, it could also be C. An ICMP unreachable message was received indicating an open port.
upvoted 0 times
...
Anglea
1 months ago
I think the correct answer is A. The port may be open on the system or blocked by a firewall.
upvoted 0 times
...
...
Cordelia
2 months ago
Hmm, I think the answer is B. The router in front of the host accepted the request and sent a reply. That's what the output seems to indicate.
upvoted 0 times
Marion
15 days ago
I'm leaning towards D. An ACK was received in response to the initial probe packet.
upvoted 0 times
...
Jerry
17 days ago
I agree with B. The router in front of the host accepted the request and sent a reply.
upvoted 0 times
...
Lizbeth
28 days ago
I believe it's C. An ICMP unreachable message was received indicating an open port.
upvoted 0 times
...
Ceola
2 months ago
I think the answer is A. The port may be open on the system or blocked by a firewall.
upvoted 0 times
...
...
Carylon
2 months ago
I'm not sure, but I think C) An ICMP unreachable message was received indicating an open port could also be a possibility.
upvoted 0 times
...
Rory
2 months ago
I agree with Glennis, because the output shows that the port is either open or blocked by a firewall.
upvoted 0 times
...
Glennis
3 months ago
I think the answer is A) The port may be open on the system or blocked by a firewall.
upvoted 0 times
...

Save Cancel