ECSA v10: EC-Council Certified Security Analyst v10

Peter, a disgruntled former employee of Zapmaky Solutions Ltd., is attempting to compromise the company website, http://zapmaky.com. He used the Nmap tool to port-scan the website and obtain information about open ports and their associated services. During the scan, he noticed that the firewall deployed by Zapmaky’s IT personnel was blocking some of his requests, and he wants to bypass it.

To evade the firewall, he wants to use the stealth-scanning technique—an incomplete TCP three-way-handshake method that can effectively bypass firewall rules and logging mechanisms.

Which of the following Nmap commands should Peter run to perform stealth scanning?

Adam is an IT administrator at Syncan Ltd. He is assigned various IT tasks, such as creating new user accounts, managing backups/restores, security authentication and passwords, and so on. While carrying out these tasks, he was asked to use the latest and most secure authentication protocol to encrypt users’ passwords stored in Microsoft Windows OS-based systems.

Which of the following authentication protocols should Adam use to meet this objective?

Rhythm Networks Pvt Ltd is a group of ethical hackers. Their client, Zombie, asked Rhythm Networks to determine how an attacker penetrated its firewall. Rhythm found that the attacker altered the addressing information in the IP packet header and the source-address bits field to bypass the firewall.

Which firewall-bypassing technique did the attacker use?

An employee is attempting to access his company's internal website. When he opened a webpage, he received an error message stating Proxy Authentication Required. He reported the issue to the company's IT department. The IT staff explained that this HTTP error means the server cannot process the request because appropriate client authentication credentials are missing for a proxy server that processes requests between clients and the server.

Identify the HTTP error code that corresponds to the error message received by the employee?

While scanning a test network, Paul sends TCP probe packets with the ACK flag set to a remote device and analyzes the TTL and WINDOW header fields of the received RST packets to determine whether each port is open or closed.

Analyze the scan result below and identify the open port.