GIAC Certified Incident Handler (GCIH) — Question 140

Which of the following is the most effective technique for identifying live client systems on a LAN?

Answer options

• A. ICMP Echo Requests
• B. TCP FIN scanning
• C. Traceroute
• D. DNS Zone Transfer

Correct answer: C

Explanation

Traceroute is the most effective technique for identifying live client systems on a LAN because it reveals the path packets take to reach a destination, thus indicating active nodes. ICMP Echo Requests may not always work due to firewall restrictions, TCP FIN scanning can be misleading if the target is not responding to closed ports, and DNS Zone Transfer is primarily used for retrieving DNS records rather than identifying live clients.