MENU
You are performing a TCP scan on a target while capturing your traffic with Wireshark. Which statement about the analysis is correct?
Suggested Answer: B
Get Premium WCNA Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
29 comments · newest first
SA
Santos
10 months ago
Definitely B, I've seen that happen a lot in scans.
CO
Cora
10 months ago
C is misleading, you can have UDP without TCP support.
JE
Jesusita
10 months ago
B is correct, ICMP usually means a firewall is in place.
IE
Iesha
10 months ago
Wait, D? A TCP RST means it's powered down? That's surprising!
JU
Jutta
10 months ago
I disagree, A doesn't make sense. Push responses don't mean blocked.
LE
Lemuel
11 months ago
I feel like a TCP RST response indicates the port is closed, not that the target is powered down.
TO
Tonja
11 months ago
I practiced a similar question where UDP responses were involved, and I think they don't necessarily mean TCP isn't supported.
MI
Micah
11 months ago
I think ICMP responses usually mean the port is firewalled, but I can't recall the exact details.
MA
Magdalene
11 months ago
I remember something about TCP Push responses, but I'm not sure if they indicate a blocked port or something else.
BU
Buffy
12 months ago
I think the key is to focus on the specific TCP responses mentioned in the options and what they indicate about the target's port status. I'll work through each option carefully.
RE
Reyes
12 months ago
Wait, I'm confused. Doesn't a TCP RST response mean the port is open, not that the target is not powered up? I need to double-check my TCP knowledge here.
GI
Gilbert
12 months ago
Okay, I've got this. If I see ICMP responses, that means the port is likely firewalled, which is option B. Easy peasy!
GI
Gilma
1 year ago
Hmm, I'm a bit unsure about this one. I need to make sure I understand the implications of the different TCP responses mentioned in the options.
ME
Merissa
1 year ago
This question seems straightforward. I'll review the options carefully and think through the TCP scan behavior to determine the correct answer.
PE
Peggie
1 year ago
I'm torn between B and D, but I think B is the safer bet. Who knows, maybe the target is just playing hard to get with those ICMP responses.
GE
Genevieve
1 year ago
Haha, C is a funny one. If I only get UDP responses, maybe the target just really hates TCP. Or it's a microwave posing as a server.
EM
Emile
1 year ago
User 3: Emile is right, it could be a possibility.
KA
Karl
1 year ago
User 2: Yeah, maybe the target just really hates TCP.
FE
Felton
1 year ago
User 1: Haha, C is a funny one.
JO
Joesph
1 year ago
User 1: Haha, C is a funny one. If I only get UDP responses, maybe the target just really hates TCP.
LU
Luisa
1 year ago
I think C) If only UDP responses are received, the target does not support TCP makes more sense.
NA
Natalya
1 year ago
I'm going with D. A TCP RST response means the target is up and running, just not listening on that port.
CH
Chaya
1 year ago
User2: Yeah, I agree. It's important to understand the different responses in Wireshark analysis.
MA
Makeda
1 year ago
User1: I think D is correct. The target is up but not listening on that port.
DE
Desmond
1 year ago
Option B sounds right to me. If I get ICMP responses, it means the port is likely blocked by a firewall.
ST
Starr
1 year ago
User 2: Yeah, that makes sense. It's a good indicator of a blocked port.
GI
Gilma
1 year ago
User 1: I think option B is correct. If we get ICMP responses, it means the port is likely firewalled.
RO
Rosita
1 year ago
I disagree, I believe the correct statement is D) If a TCP RST response is received, the target is not currently powered up.
CO
Colette
1 year ago
I think the correct statement is B) If you receive ICMP responses, the target port is likely firewalled.