GAQM Exam CPEH-001 Topic 4 Question 103 Discussion

Actual exam question for GAQM's CPEH-001 exam

Question #: 103
Topic #: 4

To scan a host downstream from a security gateway, Firewalking:

ASends a UDP-based packet that it knows will be blocked by the firewall to determine how specifically the firewall responds to such packets

BUses the TTL function to send packets with a TTL value set to expire one hop past the identified security gateway

CSends an ICMP ''administratively prohibited'' packet to determine if the gateway will drop the packet without comment.

DAssesses the security rules that relate to the target system before it sends packets to any hops on the route to the gateway

Show Suggested Answer

Suggested Answer: B

Firewalking uses a traceroute-like IP packet analysis to determine whether or not a particular packet can pass from the attacker's host to a destination host through a packet-filtering device. This technique can be used to map 'open' or 'pass through' ports on a gateway. More over, it can determine whether packets with various control information can pass through a given gateway.

by Rosina at Nov 15, 2024, 10:36 AM

Limited Time Offer

25%

Off

Get Premium CPEH-001 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Hailey

3 days ago

I'm not sure, but I think D) Assesses the security rules that relate to the target system before it sends packets to any hops on the route to the gateway makes sense too.

upvoted 0 times

...

Micah

5 days ago

I disagree, I believe the answer is A) Sends a UDP-based packet that it knows will be blocked by the firewall to determine how specifically the firewall responds to such packets.

upvoted 0 times

...

My

11 days ago

Haha, this question is a real head-scratcher! I'm going to have to go with Option D, though. Assessing the security rules first seems like the safest approach.

upvoted 0 times

...

Vernell

16 days ago

This is a tough one, but I think Option C is the way to go. Sending an ICMP 'administratively prohibited' packet seems like a good way to test the gateway's defenses.

upvoted 0 times