ExamTopics Logo
Mail Us[email protected]
Menu
Eccouncil Discussions
exam questions

Exam 312-38 All Questions

View all questions & answers for the 312-38 exam
Go to Exam

Exam 312-38 topic 1 question 522 discussion

Actual exam question from ECCouncil's 312-38
Question #: 522
Topic #: 1
[All 312-38 Questions]

Which among the following filter is used to detect a SYN/FIN attack?

  • A. tcp.flags==0x002
  • B. tcp.flags==0x004
  • C. tcp.flags==0x003
  • D. tcp.flags==0x001
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
by castro_siya at April 4, 2023, 4:59 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
ethacker
6 months ago
Selected Answer: C
Answwer is C, CND Book P.1939
upvoted 4 times
...
castro_siya
6 months, 3 weeks ago
Selected Answer: C
Use the filter tcp.flags==0x003 to detect a SYN/Fl N attack
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago