ITN 261 - CHAPTER 5 QUESTIONS & ANSWERS (GRADED A+)

ITN 261 - CHAPTER 5 QUESTIONS &
ANSWERS (GRADED A+)



If you receive a RST (reset) packet back from a target host, what do you know about
your target?

1. The target is using UDP rather than TCP.
2. The destination port is open on the target host.
3. The source port in the RST message is closed.
4. The target expects the PSH flag to be set. - The source port in the RST message is
closed.

What is the difference between a SYN scan and a full connect scan?

1. A SYN scan and a full connect scan are the same.
2. A full connect scan sends an ACK message first.
3. A SYN scan uses the PSH flag with the SYN flag.
4. The SYN scan doesn't complete the three-way handshake. - The SYN scan doesn't
complete the three-way handshake.

What is an advantage of using masscan over nmap?

1. masscan has been around longer.
2. Nmap is hard to use.
3. masscan can scan more addresses faster.
4. masscan has access to scan more of the Internet. - masscan can scan more
addresses faster.

If you were to see the following command run, what would you assume? hping -S -p 25
10.5.16.2

1. Someone was trying to probe the web port of the target.
2. Someone was trying to probe an email port on the target.
3. Someone was trying to identify if SNMP was supported on 10.5.16.2.
4. Someone had mistyped ping. - Someone was trying to probe an email port on the
target.
Which of these may be considered an evasive technique?

1. Scanning nonstandard ports