GCIH: GIAC Certified Incident HandlerDemo

Question

Using the hping2 utility, you send SYN packets with the target system’s exact TTL, beginning at port 1 and continuing through port 1024. This attack is called __________.

A Port scanning
B Cloaking
C Firewalking
D Spoofing

Explanation

Firewalking uses crafted probe packets with a controlled TTL and varying destination ports to determine which traffic can pass through a filtering device toward a target. hping2 can generate the required SYN probes across a port range.

GCIH: GIAC Certified Incident HandlerDemo

AstroTutor

Notes

Readiness

QuestionQ828

Community Discussion