GSEC: GIAC Security EssentialsDemo

By GIAC · Question Mode

QuestionQ8

Vulnerability Scanning and Penetration Testing

What is the rationale for SYN/FIN scanning?

  • A The SYN/FIN combination is useful for signaling to certain Trojans.
  • B SYN/FIN packets are commonly used to launch denial of service attacks against BSD hosts.
  • C The crafted SYN/FIN packet sometimes gets past firewalls and filtering routers.
  • D A SYN/FIN packet is used in session hijacking to take over a session.
Explanation

SYN/FIN scanning uses a deliberately unusual TCP flag combination that some firewalls and filtering routers may mishandle or fail to filter, allowing the crafted packet to pass through.

Community Discussion

No comments yet. Be the first to start the discussion!