Eccouncil Exam ECSAv10 Topic 8 Question 66 Discussion

Actual exam question for Eccouncil's ECSAv10 exam

Question #: 66
Topic #: 8

You are running through a series of tests on your network to check for any security vulnerabilities. After normal working hours, you initiate a DoS attack against your external firewall. The firewall quickly freezes up and becomes unusable.

You then initiate an FTP connection from an external IP into your internal network. The connection is successful even though you have FTP blocked at the external firewall. What has happened?

AThe firewall failed-open

BThe firewall failed-bypass

CThe firewall failed-closed

DThe firewall ACL has been purged

Show Suggested Answer

Suggested Answer: A

by Lenna at Apr 09, 2024, 09:28 AM

Limited Time Offer

25%

Off

Get Premium ECSAv10 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Meaghan

8 months ago

I agree with In a failed-open situation, the firewall allows all traffic through when it should be blocking it.

upvoted 0 times

...

Sean

8 months ago

I believe it's a failed-open scenario. The firewall let the FTP connection through despite the block.

upvoted 0 times

...

Alida

8 months ago

Do you think the firewall failed-open or failed-closed?

upvoted 0 times

...

Edmond

8 months ago

That's concerning. It shouldn't have allowed the FTP connection if it has FTP blocked.

upvoted 0 times

...

Alida

8 months ago

I can't believe the firewall froze up during the DoS attack.

upvoted 0 times

...

Kenny

8 months ago

I don't think so, if the FTP connection bypassed the firewall, it wouldn't be successful.

upvoted 0 times

...

Marisha

8 months ago

But could it also be the firewall failed-bypass?

upvoted 0 times

...

Avery

9 months ago

I agree, the firewall must have failed-open for the FTP connection to be successful.

upvoted 0 times

...

Nettie

10 months ago

I think the firewall failed-open.

upvoted 0 times

Merlyn

9 months ago

So, even though FTP is blocked, it still allowed the connection because of the failed-open state.

upvoted 0 times

...

Nan

9 months ago

That's right. In a failed-open state, the firewall allows all traffic to pass through.

upvoted 0 times

...

Trina

9 months ago

It looks like the firewall failed-open.

upvoted 0 times

...

Tarra

10 months ago

I'm starting to get a little nervous about this exam. I mean, who knows what kind of crazy scenarios they're going to throw at us? But this one, with the DoS attack and the FTP connection, that's just wild. I'm thinking the answer is C - the firewall failed-closed.

upvoted 0 times

...

Fidelia

10 months ago

This question is like a punch in the gut. Who in their right mind would run a DoS attack on their own network? That's just begging for trouble. But hey, at least it's not on the exam, right? As for the answer, I'm leaning towards B - the firewall failed-bypass.

upvoted 0 times

...

Tambra

10 months ago

Okay, so we've got a firewall that's freezing up and an FTP connection that's working when it shouldn't be. Sounds like a real mess. I'm thinking the answer is D - the firewall ACL has been purged. That would explain why the FTP connection was able to get through.

upvoted 0 times

...

Luann

10 months ago

Dude, this question is giving me a headache. I mean, who even does that kind of testing on a live network? That's just asking for trouble. But if I had to pick an answer, I'd say C - the firewall failed-closed. That would make the most sense to me.

upvoted 0 times

...

Gladys

11 months ago

Hold up, a DoS attack on the firewall? That's some serious stuff. I'm thinking the firewall failed-open (A), which would explain why the FTP connection went through even though it's supposed to be blocked.

upvoted 0 times

...

Shantell

11 months ago

Whoa, this question is intense! A DoS attack on the firewall that makes it freeze up? That's no good. As for the FTP connection, I'm gonna go with B - the firewall failed-bypass. That's the only one that makes sense to me.

upvoted 0 times

...