MENU
You are doing IP spoofing while you scan your target. You find that the target has port 23 open. Anyway you are unable to connect. Why?
Suggested Answer: A
Get Premium CPEH-001 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
The question is not telling you what state the port is being reported by the scanning utility, if the program used to conduct this is nmap, nmap will show you one of three states -- ''open'', ''closed'', or ''filtered'' a port can be in an ''open'' state yet filtered, usually by a stateful packet inspection filter (ie. Netfilter for linux, ipfilter for bsd). C and D to make any sense for this question, their bogus, and B, ''You cannot spoof + TCP'', well you can spoof + TCP, so we strike that out.
11 comments · newest first
YO
Yoko
11 months ago
Not sure about needing an automated tool, seems like overkill.
GW
Gwen
12 months ago
Wait, so even if port 23 is open, it might not respond? That's surprising!
JA
Jarod
12 months ago
You can't spoof TCP connections, that's a fact.
CH
Chana
12 months ago
Definitely a firewall issue, I agree!
VI
Victor
1 year ago
Port 23 is usually telnet, but it might be disabled.
MA
Malcolm
1 year ago
I practiced a similar question where the OS didn't respond even if the port was open, so D could be the right answer.
BL
Blythe
1 year ago
I'm not entirely sure, but I think TCP connections require a proper handshake, and spoofing might mess that up.
GE
Gerald
1 year ago
I remember reading that firewalls can block specific ports, so option A seems plausible.
RO
Rosann
1 year ago
I feel like using an automated tool might help, but I can't recall if that's necessary for telnet connections.
NO
Nobuko
1 year ago
Ah, I've seen this before. Assigning the right permission set should do the trick. I'll make sure the user has the necessary access.
KA
Karma
1 year ago
Ah, I see the challenge here. Preventing new sessions without disrupting active ones is tricky. Enabling JIT VM access could be a potential solution, but I'll need to carefully review the details to ensure it aligns with the requirements.