ECSA v10: EC-Council Certified Security Analyst v10

By ECCouncil · Question Mode

QuestionQ11

VerifiedNetwork Penetration Testing Methodology – External

Depp Networks, a leader in ethical-hacking services, was assigned to assess the strength of a client network. After using a wide range of tests, they ultimately focused on ICMP tunneling to bypass the firewall.

What makes ICMP tunneling suitable for bypassing the firewall?

Explanation

ICMP tunneling carries encapsulated data in ICMP message payloads. That payload can be arbitrary data and is not closely inspected by many firewall configurations, allowing the tunneled traffic to pass when ICMP is permitted.

Community Discussion

No comments yet. Be the first to start the discussion!