Network Scanning and Reconnaissance WAHS Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   How does packet fragmentation help in evading detection during a scan?

   • ABy splitting the scan packets into smaller fragments that may bypass simple packet filters.
   • BBy encrypting the scan packets to hide their content.
   • CBy slowing down the scan to avoid rate-based detection.
   • DBy sending the scan from multiple source IP addresses.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which of the following techniques is commonly used for host discovery to determine if a host is alive on a network?

   • ASending a UDP packet to port 53 and waiting for a DNS response
   • BSending an ICMP Echo Request and waiting for an Echo Reply
   • CSending an ARP request to the broadcast address
   • DSending a TCP SYN packet to port 80 and waiting for a RST response
   Reveal Solution Discussion Select an answer first
4. 18expert · medium

   A company wants to detect and block unauthorized network scanning without impacting legitimate traffic. The security team has a next-generation firewall (NGFW) that can perform deep packet inspection. Which configuration is most effective?

   • AImplement MAC address filtering on the internal switch
   • BSet the firewall to log all connection attempts to closed ports
   • CConfigure the firewall to drop all ICMP traffic
   • DEnable the NGFW's intrusion prevention feature with a policy that blocks common scan signatures
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which phase of the ethical hacking methodology does network scanning typically fall under?

   • AReconnaissance
   • BPost-exploitation
   • CReporting
   • DExploitation
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A penetration tester is assessing a web application server. The tester has identified an open port 443 and needs to determine the exact version of the web server software to check for known vulnerabilities. The client has a strict requirement that the scan must not generate more than 50 packets per second to avoid impacting the server. Which Nmap command is most appropriate?

   • Anmap -sV --version-light --max-rate 40 -p 443 target
   • Bnmap -sC -p 443 target
   • Cnmap -sV --version-all --max-rate 60 -p 443 target
   • Dnmap -O -p 443 target
   Reveal Solution Discussion Select an answer first