Valid 312-38 Dumps shared by ExamDiscuss.com for Helping Passing 312-38 Exam! ExamDiscuss.com now offer the newest 312-38 exam dumps, the ExamDiscuss.com 312-38 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com 312-38 dumps with Test Engine here:
Cindy is the network security administrator for her company. She just got back from a security conference in Las Vegas where they talked about all kinds of old and new security threats; many of which she did not know of. She is worried about the current security state of her company's network so she decides to start scanning the network from an external IP address. To see how some of the hosts on her network react, she sends out SYN packets to an IP range. A number of IPs responds with a SYN/ACK response. Before the connection is established, she sends RST packets to those hosts to stop the session. She has done this to see how her intrusion detection system will log the traffic. What type of scan is Cindy attempting here?
Correct Answer: B
The technique Cindy is using is known as a half-open scan, or SYN scan. This method involves sending SYN packets, which are the initial step in establishing a TCP connection, to various hosts to determine if the ports are listening. If a host responds with a SYN/ACK, it indicates that the port is open and ready to establish a connection. Cindy then sends an RST packet to terminate the session before the connection is fully established. This type of scan is useful for mapping out live hosts on a network without completing the TCP three-way handshake, thus avoiding the creation of a full connection and reducing the likelihood of detection by intrusion detection systems.