Certified Ethical Hacker (CEH v12) — Question 82

Andrew is an Ethical Hacker who was assigned the task of discovering all the active devices hidden by a restrictive firewall in the IPv4 range in a given target network.
Which of the following host discovery techniques must he use to perform the given task?

Answer options

• A. UDP scan
• B. ARP ping scan
• C. ACK flag probe scan
• D. TCP Maimon scan

Correct answer: B

Explanation

The ARP ping scan is effective for discovering devices on a local network because it operates at the data link layer, allowing it to bypass some firewall restrictions. In contrast, the other options like UDP scan, ACK flag probe scan, and TCP Maimon scan may not effectively identify devices behind a restrictive firewall, as they may be blocked or filtered by the firewall's rules.