Certified Ethical Hacker (CEH v13) — Question 16

Sam is a penetration tester hired by Inception Tech, a security organization. He was asked to perform port scanning on a target host in the network. While performing the given task, Sam sends FIN/ACK probes and determines that an RST packet is sent in response by the target host, indicating that the port is closed.
What is the port scanning technique used by Sam to discover open ports?

Answer options

• A. Xmas scan
• B. IDLE/IPID header scan
• C. TCP Maimon scan
• D. ACK flag probe scan

Correct answer: C

Explanation

The correct answer is C, TCP Maimon scan, which uses FIN and ACK flags to determine the state of ports. The other options do not involve the specific combination of flags used in this scenario or do not correspond to the behavior observed (RST response for closed ports).