A penetration tester is trying to bypass an active response tool that blocks IP addresses that have more than 100 connections per minute. Which of the following commands would allow the tester to finish the test without being blocked?
Option B uses the -T2 timing option, which slows down the scan to avoid detection by limiting the connection attempts, and specifies only a few common ports. This approach is likely to stay below the threshold of 100 connections per minute, minimizing the chance of being blocked
Wouldnt the answer be D, -F will look at the top 100 connections, therefore it wont get blocked since the system blocks when it is "more than 100 connections".
I believe it would be way too fast. Which would be noisy and possibly be detected.
upvoted 1 times
...
...
This section is not available anymore. Please use the main Exam Page.PT0-002 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
041ba31
Highly Voted 1 year, 1 month agoSlick0
Most Recent 9 months, 1 week agoIamBlackFire
6 months, 3 weeks agoKmelaun
9 months ago