CISSP-ISSAP: Information Systems Security Architecture Professional

By ISC · Question Mode

QuestionQ97

VerifiedInfrastructure and System Security

John is an Ethical Hacker for company Inc. He wants to identify the ports open on the company’s server with a port scanner, but he does not want to establish a complete TCP connection. Which of the following scanning techniques should he use?

Explanation

A TCP SYN scan is a half-open scan: it sends a SYN packet and, if the target responds with SYN/ACK, the scanner resets the connection instead of completing the TCP three-way handshake. This identifies open ports without establishing a full TCP connection.

Community Discussion

No comments yet. Be the first to start the discussion!