Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GIAC GISF Exam - Topic 6 Question 37 Discussion

Posted by Maurine on Nov 25, 2023 at 12:48 PM

John works as a Network Security Professional. He is assigned a project to test the security of

www.we-are-secure.com. He analyzes that the company has blocked all ports except port 80.

Which of the following attacking methods can he use to send the dangerous software protocols?

Suggested Answer: C

Get Premium GISF Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
49 comments · newest first
MA
Mable 10 months ago
Banner grabbing seems less relevant for this scenario.
AS
Ashlyn 11 months ago
Wait, can you really send dangerous protocols over port 80?
VA
Vanesa 11 months ago
Not sure about MAC spoofing being effective here.
ES
Estrella 11 months ago
I think URL obfuscation could work too!
VI
Vicki 11 months ago
HTTP tunneling is definitely a method to consider.
EL
Eleonore 11 months ago
Banner grabbing seems unrelated to sending dangerous software; it’s more about gathering information, right?
SH
Shaun 12 months ago
I practiced a question similar to this, and I think MAC spoofing is more about changing device addresses rather than sending protocols.
RO
Rodrigo 12 months ago
I'm not entirely sure, but I feel like URL obfuscation could also be a method to disguise malicious payloads sent over port 80.
FL
Flo 12 months ago
I remember studying HTTP tunneling as a way to bypass firewalls, so I think that might be the right answer here.
AR
Argelia 1 year ago
HTTP tunneling is the obvious choice. It's a well-known technique for evading network security controls. I feel confident about this one.
AL
Aleta 1 year ago
I'm a bit confused on the best method here. I'll need to review my notes on network security attacks to make sure I choose the right option.
LU
Lucina 1 year ago
HTTP tunneling is definitely the right approach. That's the classic way to bypass port restrictions and send malicious traffic through the firewall.
CE
Ceola 1 year ago
Hmm, I'm not too sure about this one. I'll need to think it through carefully before answering. Gotta make sure I don't miss anything.
LI
Lili 1 year ago
This seems like a straightforward question about bypassing network security. I think HTTP tunneling is the way to go here.
NO
Noemi 1 year ago
Wait, I thought the PMK was communicated to clients in WPA3-Personal. I'll have to double-check that detail before answering.
ER
Erinn 1 year ago
I think I've got this one figured out. The key is to identify the combination of factors that would prevent data entry, rather than just looking at individual causes. I'm going to carefully evaluate each option and see which one best matches the scenario described.
EL
Elise 1 year ago
I think most health plans do require a referral for CAM benefits, but I'm not completely sure if it's always the case.
JE
Jerilyn 1 year ago
I bet the company's IT team is just sitting back and chuckling at these options. They probably have a secret backdoor that's not even on the list.
GL
Glory 1 year ago
↳ replying to Jerilyn
C) URL obfuscation
TA
Tammi 1 year ago
↳ replying to Jerilyn
B) MAC spoofing
EL
Elena 1 year ago
↳ replying to Jerilyn
A) HTTP tunneling
NO
Nobuko 1 year ago
Banner grabbing? What is this, the 90s? We're talking about dangerous software protocols, not gathering information.
IR
Ira 1 year ago
↳ replying to Nobuko
URL obfuscation can hide the malicious URLs.
ST
Stephane 1 year ago
↳ replying to Nobuko
MAC spoofing can help in sending dangerous software protocols.
TO
Tonette 1 year ago
↳ replying to Nobuko
HTTP tunneling can bypass the port restrictions.
SA
Salome 1 year ago
↳ replying to Nobuko
D) Banner grabbing
RO
Ronnie 1 year ago
↳ replying to Nobuko
C) URL obfuscation
LE
Leigha 1 year ago
↳ replying to Nobuko
B) MAC spoofing
EL
Eleni 1 year ago
↳ replying to Nobuko
A) HTTP tunneling
BR
Brock 1 year ago
URL obfuscation? That's just hiding the problem, not solving it. John needs a way to actually get the data through that open port.
LE
Leigha 1 year ago
↳ replying to Brock
D) Banner grabbing
LA
Laurel 1 year ago
↳ replying to Brock
C) URL obfuscation
TA
Tamra 1 year ago
↳ replying to Brock
B) MAC spoofing
TH
Therese 1 year ago
↳ replying to Brock
A) HTTP tunneling
IR
Irene 1 year ago
MAC spoofing? Seriously? That's not going to help with the port restrictions. This is clearly an HTTP issue.
RE
Reyes 1 year ago
↳ replying to Irene
D) Banner grabbing
RO
Romana 1 year ago
↳ replying to Irene
C) URL obfuscation
LA
Latosha 1 year ago
↳ replying to Irene
B) MAC spoofing
TI
Timothy 1 year ago
↳ replying to Irene
A) HTTP tunneling
LU
Lucina 1 year ago
HTTP tunneling seems like the obvious choice here. If the company has blocked all ports except 80, then using that port for transmission is the way to go.
AN
Antonio 1 year ago
↳ replying to Lucina
I agree, HTTP tunneling would be the best option in this scenario.
JE
Jenise 1 year ago
↳ replying to Lucina
A) HTTP tunneling
TO
Tonja 1 year ago
↳ replying to Lucina
I don't think URL obfuscation would work in this case since the company has blocked all ports except port 80.
SA
Samira 1 year ago
↳ replying to Lucina
C) URL obfuscation
TO
Tomoko 1 year ago
↳ replying to Lucina
That's right, HTTP tunneling would allow John to bypass the port restrictions and send the dangerous software protocols.
CL
Clemencia 1 year ago
↳ replying to Lucina
A) HTTP tunneling
CR
Cristina 1 year ago
I believe URL obfuscation could also be a potential method to send dangerous software protocols.
NA
Natalya 1 year ago
I agree with Lashawna, HTTP tunneling can bypass the port restrictions.
LA
Lashawna 2 years ago
I think John can use HTTP tunneling to send dangerous software protocols.
0/2000 characters

Save Cancel