Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GIAC GCIA Exam - Topic 3 Question 85 Discussion

Adam works as a Security Administrator for Umbrella Inc. A project has been assigned to him to secure access to the network of the company from all possible entry points. He segmented the network into several subnets and installed firewalls all over the network. He has placed very stringent rules on all the firewalls, blocking everything in and out except ports that must be used.He does need to have port 80 open since his company hosts a website that must be accessed from the Internet. Adam is still worried about programs like Hping2 that can get into a network through covert channels.Which of the following is the most effective way to protect the network of the company from an attacker using Hping2 to scan his internal network?
A) Block ICMP type 13 messages
B) Block all outgoing traffic on port 21
C) Block all outgoing traffic on port 53
D) Block ICMP type 3 messages

GIAC GCIA Exam - Topic 3 Question 85 Discussion

Actual exam question for GIAC's GCIA exam
Question #: 85
Topic #: 3
[All GCIA Questions]

Adam works as a Security Administrator for Umbrella Inc. A project has been assigned to him to secure access to the network of the company from all possible entry points. He segmented the network into several subnets and installed firewalls all over the network. He has placed very stringent rules on all the firewalls, blocking everything in and out except ports that must be used.

He does need to have port 80 open since his company hosts a website that must be accessed from the Internet. Adam is still worried about programs like Hping2 that can get into a network through covert channels.

Which of the following is the most effective way to protect the network of the company from an attacker using Hping2 to scan his internal network?

Show Suggested Answer Hide Answer
Suggested Answer: A

Contribute your Thoughts:

0/2000 characters
I’m leaning towards blocking ICMP type 3 messages, but I wish I had more clarity on how that specifically counters Hping2.
upvoted 0 times
...
Corinne
5 days ago
This question reminds me of a practice exam where we had to secure a network against similar tools. I feel like blocking ICMP type 13 could be a good move.
upvoted 0 times
...
Melodie
10 days ago
I think blocking ICMP type 3 could help, but I’m not entirely confident if that’s the best option for preventing scans.
upvoted 0 times
...
Goldie
15 days ago
I remember we discussed how Hping2 can manipulate packets, but I'm not sure which ICMP types are most relevant here.
upvoted 0 times
...

Save Cancel