Exam 312-50v12 topic 1 question 188 discussion

D. UDP Ping Scan When dealing with strict TCP filtering rules on a firewall, a UDP Ping Scan can be an effective host discovery technique. Unlike ICMP or TCP SYN ping scans, UDP ping scans use UDP packets, which can sometimes bypass certain firewall restrictions.

ChatGPT says C: In environments with strict TCP filtering rules on firewalls, traditional host discovery methods like ICMP pings are often blocked or ignored, making them unreliable for identifying live hosts. However, firewalls often allow traffic to certain TCP ports (e.g., port 80 for HTTP, 443 for HTTPS) to remain functional — and that’s where a TCP SYN Ping Scan comes in. 🔍 TCP SYN Ping Scan (-PS in Nmap): - Sends TCP SYN packets to specified ports (commonly allowed ones like 80, 443). - If the host is alive and the port is open, it will respond with a SYN-ACK. - Even if the port is closed, the host will send a RST, confirming it is up. - Useful for bypassing ICMP and default ping blocking on firewalls. - Faster and stealthier than full connection scans.

strict TCP filtering rules on its firewall

SYN packets are often permitted for legitimate connection attempts, making it an effective way to discover hosts in environments with restricted ICMP and UDP traffic.

Is D. Key word "strict TCP filtering rules on its firewall". so can not be ICMP and TCP related scans.