Computer Hacking Forensic Investigator (CHFI v10) — Question 83

If an attacker's computer sends an IPID of 31400 to a zombie computer on an open port in IDLE scanning, what will be the response?

Answer options

• A. The zombie will not send a response
• B. 31402
• C. 31399
• D. 31401

Correct answer: B

Explanation

The correct response is 31402, which is the expected increment of the IPID from the zombie computer, indicating that it has received a packet. The other options are incorrect as they do not reflect the expected behavior of the zombie computer in response to the initial IPID sent by the attacker.