Certified Ethical Hacker CEH · Free Practice Question Easy
Question 90
Danny, a black hat hacker, wants to determine the type of firewall deployed at the target organization. He sends an ACK packet to a known closed port. He received a RST packet immediately from that closed port. Which type of firewall is installed?
- A A. Stateful firewall
- B B. Non-stateful firewall
- C C. Both stateful and non stateful
- D D. No firewall installed
Reveal correct answer
Correct answer: B
Explanation
Correct Answer: B. non-stateful firewall Explanation: A non-stateful firewall would typically respond with an RST packet immediately upon receiving an ACK packet to a closed port. In contrast, if you send a TCP ACK segment to a known closed port on a firewall but it does not respond with an RST, and you receive no other response, it is likely that the firewall is configured to silently drop the incoming packet. This behavior is characteristic of stateful firewalls, which maintain a table of connections and only allow traffic that belongs to an established connection or meets specific criteria defined in the firewall rules.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
