GCIH: GIAC Certified Incident HandlerDemo

By GIAC · Question Mode

QuestionQ447

Scanning and Mapping

What conclusion can be drawn from the picture below?

Question Image

  • A The 4 router has ICMP time exceeded message disabled
  • B The user IP address is 65.35.35.101
  • C www.sans.org is under a ping of death attack
  • D www.sans.org IP is at 65.35.35.23
Explanation

Traceroute increments packet TTL values and relies on intermediate routers returning ICMP Time Exceeded responses. A row of asterisks at hop 4, followed by successful replies from later hops, indicates that hop 4 is not returning those ICMP Time Exceeded messages, consistent with them being disabled or filtered there.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!