What is the proper response for a NULL scan if the port is open?

Study for the EC-Council Certified Ethical Hacker (CEH) v13 Exam. Utilize flashcards and multiple-choice questions with helpful hints and detailed explanations. Excel in your exam preparation!

Multiple Choice

What is the proper response for a NULL scan if the port is open?

Explanation:
In a NULL scan the probe packet carries no TCP flags. Because there is no connection attempt being made, an open port typically does not produce any reply—the TCP stack has nothing to respond with for a packet that has no flags. That silence is how the scanner identifies an open port. If the port were closed, the host would usually respond with a reset (RST) to terminate the attempt. The other responses listed come from different scan methods or states and do not occur when probing an open port with a NULL scan.

In a NULL scan the probe packet carries no TCP flags. Because there is no connection attempt being made, an open port typically does not produce any reply—the TCP stack has nothing to respond with for a packet that has no flags. That silence is how the scanner identifies an open port. If the port were closed, the host would usually respond with a reset (RST) to terminate the attempt. The other responses listed come from different scan methods or states and do not occur when probing an open port with a NULL scan.

More Multiple Choice Questions
Subscribe

Get the latest from Passetra

You can unsubscribe at any time. Read our privacy policy