Computer Hacking Forensic Investigator (CHFI) — Question 44

If an attacker's computer sends an IPID of 31400 to a zombie computer on an open port in IDLE scanning, what will be the response?

Answer options

• A. The zombie will not send a response
• B. 31402
• C. 31399
• D. 31401

Correct answer: D

Explanation

The correct response is D (31401) because the zombie computer will increment the IPID by one for every packet it receives. Option A is incorrect as the zombie does respond, while options B and C are incorrect because they do not reflect the expected increment from the initial IPID of 31400.