Eccouncil Exam ECSAv10 Topic 8 Question 66 Discussion

Actual exam question for Eccouncil's ECSAv10 exam

Question #: 66
Topic #: 8

You are running through a series of tests on your network to check for any security vulnerabilities. After normal working hours, you initiate a DoS attack against your external firewall. The firewall quickly freezes up and becomes unusable.

You then initiate an FTP connection from an external IP into your internal network. The connection is successful even though you have FTP blocked at the external firewall. What has happened?

AThe firewall failed-open

BThe firewall failed-bypass

CThe firewall failed-closed

DThe firewall ACL has been purged

Show Suggested Answer

Suggested Answer: A

by Lenna at Apr 09, 2024, 09:28 AM

Limited Time Offer

25%

Off

Get Premium ECSAv10 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Meaghan

1 years ago

I agree with In a failed-open situation, the firewall allows all traffic through when it should be blocking it.

upvoted 0 times

...

Sean

1 years ago

I believe it's a failed-open scenario. The firewall let the FTP connection through despite the block.

upvoted 0 times

...

Alida

1 years ago

Do you think the firewall failed-open or failed-closed?

upvoted 0 times

...

Edmond

1 years ago

That's concerning. It shouldn't have allowed the FTP connection if it has FTP blocked.

upvoted 0 times

...

Alida

1 years ago

I can't believe the firewall froze up during the DoS attack.

upvoted 0 times

...

Kenny

1 years ago

I don't think so, if the FTP connection bypassed the firewall, it wouldn't be successful.

upvoted 0 times

...

Marisha

1 years ago

But could it also be the firewall failed-bypass?

upvoted 0 times

...

Avery

1 years ago

I agree, the firewall must have failed-open for the FTP connection to be successful.

upvoted 0 times

...

Nettie

1 years ago

I think the firewall failed-open.

upvoted 0 times

Merlyn

1 years ago

So, even though FTP is blocked, it still allowed the connection because of the failed-open state.

upvoted 0 times

...

Nan

1 years ago

That's right. In a failed-open state, the firewall allows all traffic to pass through.

upvoted 0 times

...

Trina

1 years ago

It looks like the firewall failed-open.

upvoted 0 times

...

Tarra

1 years ago

I'm starting to get a little nervous about this exam. I mean, who knows what kind of crazy scenarios they're going to throw at us? But this one, with the DoS attack and the FTP connection, that's just wild. I'm thinking the answer is C - the firewall failed-closed.

upvoted 0 times

...

Fidelia

1 years ago

This question is like a punch in the gut. Who in their right mind would run a DoS attack on their own network? That's just begging for trouble. But hey, at least it's not on the exam, right? As for the answer, I'm leaning towards B - the firewall failed-bypass.

upvoted 0 times

...

Tambra

1 years ago

Okay, so we've got a firewall that's freezing up and an FTP connection that's working when it shouldn't be. Sounds like a real mess. I'm thinking the answer is D - the firewall ACL has been purged. That would explain why the FTP connection was able to get through.

upvoted 0 times

...

Luann

1 years ago

Dude, this question is giving me a headache. I mean, who even does that kind of testing on a live network? That's just asking for trouble. But if I had to pick an answer, I'd say C - the firewall failed-closed. That would make the most sense to me.

upvoted 0 times

...

Gladys

1 years ago

Hold up, a DoS attack on the firewall? That's some serious stuff. I'm thinking the firewall failed-open (A), which would explain why the FTP connection went through even though it's supposed to be blocked.

upvoted 0 times

...

Shantell

1 years ago

Whoa, this question is intense! A DoS attack on the firewall that makes it freeze up? That's no good. As for the FTP connection, I'm gonna go with B - the firewall failed-bypass. That's the only one that makes sense to me.

upvoted 0 times

...