Free 312-50 Exam Braindumps (page: 24)

Page 23 of 191

You want to know whether a packet filter is in front of 192.168.1.10. Pings to 192.168.1.10 don't get answered. A basic nmap scan of 192.168.1.10 seems to hang without returning any information. What should you do next?

  1. Use NetScan Tools Pro to conduct the scan
  2. Run nmap XMAS scan against 192.168.1.10
  3. Run NULL TCP hping2 against 192.168.1.10
  4. The firewall is blocking all the scans to 192.168.1.10

Answer(s): C



What does ICMP (type 11, code 0) denote?

  1. Unknown Type
  2. Time Exceeded
  3. Source Quench
  4. Destination Unreachable

Answer(s): B

Explanation:

An ICMP Type 11, Code 0 means Time Exceeded [RFC792], Code 0 = Time to Live exceeded in Transit and Code 1 = Fragment Reassembly Time Exceeded.



An nmap command that includes the host specification of 202.176.56-57.* will scan____ number of hosts.

  1. 2
  2. 256
  3. 512
  4. Over 10, 000

Answer(s): C

Explanation:

The hosts with IP address 202.176.56.0-255 & 202.176.56.0-255 will be scanned (256+256=512)



A specific site received 91 ICMP_ECHO packets within 90 minutes from 47 different sites.
77 of the ICMP_ECHO packets had an ICMP ID:39612 and Seq:57072. 13 of the ICMP_ECHO packets had an ICMP ID:0 and Seq:0. What can you infer from this information?

  1. The packets were sent by a worm spoofing the IP addresses of 47 infected sites
  2. ICMP ID and Seq numbers were most likely set by a tool and not by the operating system
  3. All 77 packets came from the same LAN segment and hence had the same ICMP ID and Seq number
  4. 13 packets were from an external network and probably behind a NAT, as they had an ICMP ID 0 and Seq 0

Answer(s): B






Post your Comments and Discuss EC-Council 312-50 exam with other Community members:

312-50 Discussions & Posts