To see how some of the hosts on your network react, Winston sends out SYN...

Vendor: GAQM
Product: CEH-001
Update on: Jan 2, 2026
Questions: 878

GAQM CEH-001 Question Answer

To see how some of the hosts on your network react, Winston sends out SYN packets to an IP range. A number of IPs respond with a SYN/ACK response. Before the connection is established he sends RST packets to those hosts to stop the session. Winston has done this to see how his intrusion detection system will log the traffic. What type of scan is Winston attempting here?

Winston is attempting to find live hosts on your company's network by using an XMAS scan.

He is utilizing a SYN scan to find live hosts that are listening on your network.

This type of scan he is using is called a NULL scan.

He is using a half-open scan to find live hosts on your network.