Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GIAC Exam GCED Topic 8 Question 45 Discussion

Actual exam question for GIAC's GCED exam
Question #: 45
Topic #: 8
[All GCED Questions]

When running a Nmap UDP scan, what would the following output indicate?

Show Suggested Answer Hide Answer
Suggested Answer: C

In a case study of a redirect tunnel set up on a router, some anomalies were noticed while watching network traffic with the TCPdump packet sniffer.

Packets going to port 25 (Simple Mail Transfer Protocol [SMTP] used by mail servers and other Mail Transfer Agents [MTAs] to send and receive e-mail) were apparently taking a different network path. The TLs were consistently three less than other destination ports, indicating another three network hops were taken.

Other IP header values listed, such as fragment offset. The acknowledgement number is a TCP, not IP, header field.


Contribute your Thoughts:

Kristeen
3 months ago
I'm going with C. An ICMP unreachable message was received indicating an open port. That's the only one that really makes sense to me.
upvoted 0 times
Vanna
1 months ago
I'm not sure about C, but D) An ACK was received in response to the initial probe packet could also be a possibility.
upvoted 0 times
...
Eden
2 months ago
I agree with you, C) An ICMP unreachable message was received indicating an open port seems to be the correct answer.
upvoted 0 times
...
India
2 months ago
I'm leaning towards B) The router in front of the host accepted the request and sent a reply.
upvoted 0 times
...
Vashti
2 months ago
I think A) The port may be open on the system or blocked by a firewall is more likely.
upvoted 0 times
...
...
Margery
3 months ago
Ha! I bet the person who wrote this question is a real prankster. They're trying to trick us with these answers.
upvoted 0 times
Azalee
2 months ago
C) An ICMP unreachable message was received indicating an open port
upvoted 0 times
...
Tabetha
2 months ago
B) The router in front of the host accepted the request and sent a reply
upvoted 0 times
...
Gilma
3 months ago
A) The port may be open on the system or blocked by a firewall
upvoted 0 times
...
...
Mertie
3 months ago
Wait, are you sure? I thought the correct answer was A. The port may be open on the system or blocked by a firewall. I'm a bit confused here.
upvoted 0 times
Cory
2 months ago
I'm not entirely sure, but I believe it could be either A or C. It depends on the specific situation.
upvoted 0 times
...
Desirae
3 months ago
Actually, it could also be C. An ICMP unreachable message was received indicating an open port.
upvoted 0 times
...
Anglea
3 months ago
I think the correct answer is A. The port may be open on the system or blocked by a firewall.
upvoted 0 times
...
...
Cordelia
4 months ago
Hmm, I think the answer is B. The router in front of the host accepted the request and sent a reply. That's what the output seems to indicate.
upvoted 0 times
Marion
2 months ago
I'm leaning towards D. An ACK was received in response to the initial probe packet.
upvoted 0 times
...
Jerry
2 months ago
I agree with B. The router in front of the host accepted the request and sent a reply.
upvoted 0 times
...
Lizbeth
3 months ago
I believe it's C. An ICMP unreachable message was received indicating an open port.
upvoted 0 times
...
Ceola
3 months ago
I think the answer is A. The port may be open on the system or blocked by a firewall.
upvoted 0 times
...
...
Carylon
4 months ago
I'm not sure, but I think C) An ICMP unreachable message was received indicating an open port could also be a possibility.
upvoted 0 times
...
Rory
4 months ago
I agree with Glennis, because the output shows that the port is either open or blocked by a firewall.
upvoted 0 times
...
Glennis
4 months ago
I think the answer is A) The port may be open on the system or blocked by a firewall.
upvoted 0 times
...

Save Cancel