Computer Hacking Forensic Investigator (CHFI) — Question 8

Michael works for Kimball Construction Company as senior security analyst. As part of yearly security audit, Michael scans his network for vulnerabilities. Using
Nmap, Michael conducts XMAS scan and most of the ports scanned do not give a response. In what state are these ports?

Answer options

• A. Closed
• B. Open
• C. Stealth
• D. Filtered

Correct answer: B

Explanation

The correct answer is B, as an 'Open' state indicates that the port is actively accepting connections, which aligns with the behavior observed during an XMAS scan. The other options, such as 'Closed' and 'Filtered,' suggest that the ports are either not accessible or are being blocked by a firewall, which does not match the scenario described.