Câu 44: 312-50V13: Certified Ethical Hacker v13

Consider a scenario where a Certified Ethical Hacker is attempting to infiltrate a company's network without being detected. The hacker intends to use a stealth scan on a BSD-derived TCP/IP stack, but he suspects that the network security devices may be able to detect SYN packets. Based on this information, which of the following methods should he use to bypass the detection mechanisms and why?

1. A. Maimon Scan, because it is very similar to NULL, FIN, and Xmas scans, but the probe used here is FIN/ACK
2. B. Xmas Scan, because it can pass through filters undetected, depending on the security mechanisms installed
3. C. TCP Connect/Full-Open Scan, because it completes a three-way handshake with the target machine
4. D. ACK Flag Probe Scan, because it exploits the vulnerabilities within the BSD-derived TCP/IP stack — đáp án hiện tại