Certified Ethical Hacker (CEH v12) — Question 68

What firewall evasion scanning technique make use of a zombie system that has low network activity as well as its fragment identification numbers?

Answer options

• A. Packet fragmentation scanning
• B. Spoof source address scanning
• C. Decoy scanning
• D. Idle scanning

Correct answer: D

Explanation

Idle scanning is the correct answer because it employs a zombie system with minimal network traffic to send packets, making it difficult for firewalls to detect the actual source. The other options either do not utilize a zombie system or do not focus on fragment identification numbers, making them unsuitable for this specific scanning technique.