312-50v12 Exam - Question 206

Question

An ethical hacker is performing a network scan to evaluate the security of a company's IT infrastructure. During the scan, he discovers an active host with multiple open ports running various services. The hacker uses TCP communication flags to establish a connection with the host and starts communicating with it. He sends a SYN packet to a port on the host and receives a SYN/ACK packet back. He then sends an ACK packet for the received SYN/ACK packet, which triggers an open connection. Which of the following actions should the ethical hacker perform next?

Examice · Accepted Answer

After establishing a connection with the host by completing the TCP three-way handshake, the next logical step for an ethical hacker is to conduct a vulnerability scan on the open port to identify any potential weaknesses. This action is essential for evaluating the security of the system and identifying areas that could be exploited by malicious actors. Closing the connection prematurely would not provide the information needed to assess the vulnerabilities of the open ports.

qwerty100 · Answer

B. Conduct a vulnerability scan on the open port to identify any potential weaknesses.

qwerty100 · Answer

B. Conduct a vulnerability scan on the open port to identify any potential weaknesses.

insaniunt · Answer

D, I think
The ethical hacker must send a FIN or RST packet to terminate the connection

MustafaDDD · Answer

I am just thinking, the question says, "An ethical hacker is performing a network scan to evaluate the security of a company's IT infrastructure", why would the hacker close the session?

xbsumz · Answer

Could someone help me confirm the validity of this ethical hacking technique

Truth_Seeker · Answer

I think the correct answer is D

it is a common practice across various network scanning tools to ensure that connections are properly managed and closed. Therefore, the conclusion about closing connections with a FIN or RST packet after a scan is applicable to most network scanners, not just Nmap

GK2205 · Answer

Another one that is tricky because of nuance: The Ethical Hacker is performing a network scan and not necessarily a vulnerability scan.  Network scans do not travers into vulnerability scans although if required we would do so.  The context of the question is key here IMHO.  One thing is very clear throughout the program, as a CEH your job is to do no harm and not to compromise.  i.e. When you gain access to a sensitive database you are to report on it, not enter and potentially exploit it.  Similarly here, your scope is a network scan, not a vulnerability scan.  So RST and move on.

312-50v12 Exam - Question 206

Discussion