Exam 312-49 topic 1 question 141 discussion

Actual exam question from ECCouncil's 312-49

Question #: 141
Topic #: 1

Michael works for Kimball Construction Company as senior security analyst. As part of yearly security audit, Michael scans his network for vulnerabilities. Using
Nmap, Michael conducts XMAS scan and most of the ports scanned do not give a response. In what state are these ports?

A. Closed
B. Open
C. Stealth
D. Filtered

Show Suggested Answer

Suggested Answer: B 🗳️

by Pet at June 15, 2019, 1:35 p.m.

Comments

Submit Cancel

thebigdax

1 year ago

since most of the port did not send a response I think the most appropriate answer should be D. https://nmap.org/book/scan-methods-null-fin-xmas-scan.html Table 5.4. How Nmap interprets responses to a NULL, FIN, or Xmas scan probe Probe Response Assigned State No response received (even after retransmissions) open|filtered

upvoted 1 times

...

JArafat

2 years ago

XMAS scans send packets with all of the flags — including FIN — expecting no response, which would mean the port is open. If the port is closed, a RST response would be received.

upvoted 1 times

...