Exam 312-50v12 topic 1 question 84 discussion

B. ARP ping scan Like 312-50 V11 Q160 CEH book V12 Module 03 P285 In the ARP ping scan, the ARP packets are sent for discovering all active devices in the IPv4 range even though the presence of such devices is hidden by restrictive firewalls.

Since the question doesn’t specify that the devices are on the local subnet, C. ACK Flag Probe Scan is a safer answer for discovering devices hidden by a restrictive firewall.

B. ARP ping scan

B. ARP ping scan this scenario is literally the use case described in CEH v12 course book

An ACK scan will let you know there is a stateful firewall in-line but will not give you details on the devices behind it.

B. ARP ping scan ----------------------------------- A. UDP scan: Network scan using UDP packets to check port status on a target system. B. ARP ping scan: Scan method using ARP requests to discover IP and MAC addresses in a local network. C. ACK flag probe scan: TCP port scan using ACK flag to determine port status. D. TCP Maimon scan: Port scan using specific flag combinations(Maimon Techniques), including SYN and FIN to determine port status.

The correct option is B. B. ARP ping scan

Answer: B Explanation: To discover all the active devices hidden by a restrictive firewall in the IPv4 range, Andrew should use an ARP ping scan technique. ARP ping scan is an efficient and effective technique that enables a host to discover all the active hosts on the network, especially when it is difficult to identify devices using the traditional methods such as ICMP ping. ARP requests are used to check the existence of each device with a specific IP address within the network, and the devices with the corresponding MAC addresses reply with an ARP response. Therefore, by sending ARP requests to each IP address in a range, Andrew can identify all active devices within the network.