Eccouncil Exam 212-89 Topic 3 Question 25 Discussion

Actual exam question for Eccouncil's 212-89 exam

Question #: 25
Topic #: 3

[All 212-89 Questions]

Bran is an incident handler who is assessing the network of the organization. In the

process, he wants to detect ping sweep attempts on the network using Wireshark tool.

Which of the following Wireshark filter he must use to accomplish this task?

Aicmp.seq

Bicmp.redir_gw

Cicmp.type==8

Dicmp.ident

Show Suggested Answer

Suggested Answer: A

by Nichelle at May 05, 2022, 11:39 PM

Limited Time Offer

25%

Off

Get Premium 212-89 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Desmond

7 days ago

Ooh, a ping sweep detection task! This is right up my alley. I bet the answer is C, icmp.type==8. That's the ICMP echo request packet, which is exactly what you'd use to detect a ping sweep.

upvoted 0 times

...

Olen

19 days ago

I'm not sure, but I think icmp.ident could also be used to detect ping sweep attempts.

upvoted 0 times

...

Chantay

24 days ago

I agree with Elbert, icmp.type==8 is the correct filter for detecting ping sweep attempts.

upvoted 0 times

...

Elbert

25 days ago

I think Bran should use option C) icmp.type==8 to detect ping sweep attempts.

upvoted 0 times

...