GAQM Exam CPEH-001 Topic 4 Question 103 Discussion

Actual exam question for GAQM's CPEH-001 exam

Question #: 103
Topic #: 4

To scan a host downstream from a security gateway, Firewalking:

ASends a UDP-based packet that it knows will be blocked by the firewall to determine how specifically the firewall responds to such packets

BUses the TTL function to send packets with a TTL value set to expire one hop past the identified security gateway

CSends an ICMP ''administratively prohibited'' packet to determine if the gateway will drop the packet without comment.

DAssesses the security rules that relate to the target system before it sends packets to any hops on the route to the gateway

Show Suggested Answer

Suggested Answer: B

Firewalking uses a traceroute-like IP packet analysis to determine whether or not a particular packet can pass from the attacker's host to a destination host through a packet-filtering device. This technique can be used to map 'open' or 'pass through' ports on a gateway. More over, it can determine whether packets with various control information can pass through a given gateway.

by Rosina at Nov 15, 2024, 10:36 AM

Limited Time Offer

25%

Off

Get Premium CPEH-001 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tamekia

8 days ago

Option A is the way to go, in my opinion. Probing the firewall's response to a blocked UDP packet is a classic technique. Gotta love that packet trickery!

upvoted 0 times

...

Rebecka

9 days ago

Option B all the way! Sending packets with a TTL value set to expire past the gateway is like a ninja move. Sneaky and effective!

upvoted 0 times

...

Hailey

19 days ago

I'm not sure, but I think D) Assesses the security rules that relate to the target system before it sends packets to any hops on the route to the gateway makes sense too.

upvoted 0 times

...

Micah

21 days ago

I disagree, I believe the answer is A) Sends a UDP-based packet that it knows will be blocked by the firewall to determine how specifically the firewall responds to such packets.

upvoted 0 times

...

My

27 days ago

Haha, this question is a real head-scratcher! I'm going to have to go with Option D, though. Assessing the security rules first seems like the safest approach.

upvoted 0 times

...

Vernell

1 months ago

This is a tough one, but I think Option C is the way to go. Sending an ICMP 'administratively prohibited' packet seems like a good way to test the gateway's defenses.

upvoted 0 times