QuestionQ71

Analyze

Refer to the exhibit.

Question Image

What does this indicate?

  • A Someone is attempting to determine which ports are open on devices in subnet 10.1.120.0/24.
  • B Someone is attempting to launch a DoS attack against clients in the 10.1.120.0/24 subnet.
  • C Port forwarding policies are misconfigured on core routers or routing switches.
  • D A hacker is hijacking the connections between clients in 10.1.120.0/24 and the true owner of the 10.1.122.150 IP address.
Explanation

TCP packets with the FIN, PSH, and URG flags set are characteristic of an Xmas scan. Sending these probes to numerous hosts and destination ports in 10.1.120.0/24 is an attempt to identify open ports on devices in that subnet.

Community Discussion

No comments yet. Be the first to start the discussion!