Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GIAC GPEN Exam - Topic 9 Question 67 Discussion

Posted by Chaya on Feb 10, 2025 at 09:12 AM

In which of the following scanning methods does an attacker send the spoofed IP address to send a SYN packet to the target?

Suggested Answer: C

Get Premium GPEN Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
41 comments · newest first
HY
Hyun 10 months ago
Just to clarify, NULL scanning doesn't use spoofed IPs.
LE
Lenna 11 months ago
A is correct, but I see why people might confuse it with XMAS.
CH
Chantay 11 months ago
Wait, are you sure? I thought it was XMAS.
AH
Ahmad 11 months ago
Totally agree, IDLE is the way to go for that!
LE
Leota 11 months ago
It's definitely A, IDLE scanning uses a spoofed IP.
SL
Slyvia 11 months ago
I have a vague memory of the XMAS scan, but I don't think it involves sending a SYN packet with a spoofed address. It's definitely tricky!
SH
Shay 12 months ago
The NULL scan seems like it could be related, but I can't recall if it uses a spoofed IP. I feel like I need to double-check my notes.
GA
Gaynell 12 months ago
I remember practicing a question about TCP FIN scans, but I don't think they involve spoofing an IP address like IDLE does.
GA
Gail 12 months ago
I think the IDLE scan is the one where you use a spoofed IP to send a SYN packet, but I'm not entirely sure.
LA
Lashunda 12 months ago
The key here is the use of a spoofed IP address to send the SYN packet. That narrows it down to either IDLE or TCP FIN. I'm going to go with IDLE since that's the method that specifically uses a spoofed IP.
TH
Theola 12 months ago
I'm a bit confused by the wording of this question. Can someone explain the difference between the scanning methods a bit more? I want to make sure I understand the concepts before selecting an answer.
KR
Kris 12 months ago
Okay, let's see. IDLE uses a zombie system, TCP FIN just sends FIN packets, NULL sends packets with no flags set, and XMAS sends packets with the FIN, URG, and PUSH flags set. I'm going to go with IDLE on this one.
BE
Benedict 12 months ago
Hmm, I'm not entirely sure about this one. I'll need to think through the different scanning methods and how they work to determine which one matches the description.
LI
Lisbeth 1 year ago
This looks like a question on network scanning techniques. I think the key is to identify which method uses a spoofed IP address to send a SYN packet.
TE
Tegan 1 year ago
IDLE, because who needs a real plan when you can just sit back and let the computer do all the work?
KA
Kaycee 1 year ago
A) IDLE, the perfect choice for the lazy hacker who wants to let someone else do the work.
JA
Janae 1 year ago
↳ replying to Kaycee
D) XMAS, that one seems like it could cause a lot of chaos on the target's system.
PA
Patti 1 year ago
↳ replying to Kaycee
C) NULL, I heard that one can be pretty effective in evading detection.
VI
Vilma 1 year ago
↳ replying to Kaycee
B) TCP FIN, that sounds like a sneaky way to attack a target.
TA
Tammy 1 year ago
↳ replying to Kaycee
A) IDLE, the perfect choice for the lazy hacker who wants to let someone else do the work.
JU
Justine 1 year ago
C) NULL, the only thing more empty than this question is my brain right now.
ME
Meghann 1 year ago
↳ replying to Justine
D) XMAS, I think the answer is D) XMAS because it involves sending a spoofed IP address.
BE
Bernardo 1 year ago
↳ replying to Justine
C) NULL, the only thing more empty than this question is my brain right now.
CU
Curt 1 year ago
↳ replying to Justine
D) XMAS
HO
Honey 1 year ago
↳ replying to Justine
C) NULL
FA
Fairy 1 year ago
↳ replying to Justine
B) TCP FIN
GE
Georgene 1 year ago
↳ replying to Justine
A) IDLE
SH
Sheron 1 year ago
D) XMAS, because who doesn't love a good Christmas-themed network attack?
NI
Nidia 1 year ago
↳ replying to Sheron
XMAS, because who doesn't love a good Christmas-themed network attack?
YA
Yan 1 year ago
↳ replying to Sheron
D) XMAS
UL
Ula 1 year ago
↳ replying to Sheron
C) NULL
CH
Christiane 1 year ago
↳ replying to Sheron
B) TCP FIN
LU
Lucy 1 year ago
↳ replying to Sheron
A) IDLE
TO
Tomoko 1 year ago
I'm not sure, but I think it might be C) NULL because it also involves sending spoofed IP addresses.
SE
Sean 2 years ago
Hmm, I'm pretty sure it's IDLE, gotta love that spoofed IP address magic.
MA
Marguerita 1 year ago
↳ replying to Sean
Yeah, XMAS is the correct answer
MA
Marget 1 year ago
↳ replying to Sean
Bummer, I thought it was A) IDLE too
GE
Gene 1 year ago
↳ replying to Sean
No, it's actually D) XMAS
MI
Milly 1 year ago
↳ replying to Sean
A) IDLE
AD
Adria 2 years ago
I agree with Melodie, because in XMAS scanning, the attacker sends spoofed IP addresses to send SYN packets.
ME
Melodie 2 years ago
I think the answer is D) XMAS.
0/2000 characters

Save Cancel