Câu 54: GISF: GIAC Information Security Fundamentals

TCP FIN scanning is a type of stealth scanning through which the attacker sends a FIN packet to the target port. If the port is closed, the victim assumes that this packet was sent mistakenly by the attacker and sends the RST packet to the attacker. If the port is open, the FIN packet will be ignored and the port will drop the packet. Which of the following operating systems can be easily identified with the help of TCP FIN scanning?

1. A. Windows — đáp án hiện tại
2. B. Red Hat
3. C. Solaris
4. D. Knoppix