You noticed that the IP header length is 20 bytes and there is a datagram length of 84 bytes. You have captured some packets from a system you would like to passively fingerprint. Which of the following sets all TCP flags to zeros? ICMP is blocked, so no scan is performed. The technique only checks DNS and does not scan. Which of the following best describes the correct answer? Your partner asks you to explain the results. You performed the following scan: nmap -sL Starting Nmap 6.25 ( ) at 18:46 You have been assigned a junior pen tester during a pen test. Which of the following Netcat commands could be used to perform a UDP scan of the lower 1024 ports? If the system had the specific listening port open, what would be returned? Listed here is the scan you performed: nmap -sX -vv -P0 192.168.1.123 -p 80. Which of the following is a vulnerability in the Bash shell that was discovered in 2014 and thereafter exploited to launch a range of attacks against Linux and UNIX systems?Īs part of a pen test, you have port scanned a Linux system. What is the correct type for a ping request and a ping response? ICMP is a valuable tool for troubleshooting and reconnaissance. While reviewing this traffic, you are able to identify the OS of the devices that are communicating. You have been able to SPAN a port and are now monitoring all traffic with Wireshark. Which of the following switches would be your best option?ĭuring an internal pen test, you have gained access to an internal switch. The client would like you to identify the OS.

Your client has asked you to run an Nmap scan against the servers it has located in its DMZ. CEH Certified Ethical Hacker Cert Guide, 4th Edition

Wireshark certification pearson