Certified Ethical Hacker (CEH v13) — Question 256

What firewall evasion scanning technique make use of a zombie system that has low network activity as well as its fragment identification numbers?

Answer options

• A. Packet fragmentation scanning
• B. Spoof source address scanning
• C. Decoy scanning
• D. Idle scanning

Correct answer: D

Explanation

Idle scanning is the correct answer because it leverages a 'zombie' host to send packets, allowing the attacker to infer information about the target without directly interacting with it. The other options do not involve using a low-activity system in this manner, making them unsuitable for this specific technique.