Eccouncil Exam 312-38 Topic 6 Question 89 Discussion

Actual exam question for Eccouncil's 312-38 exam

Question #: 89
Topic #: 6

[All 312-38 Questions]

How can one identify the baseline for normal traffic?

AWhen the ACK flag appears at the beginning and the RST flag appears at the end of the connection

BWhen the SYN flag appears at the beginning and the FIN flag appears at the end of the connection

CWhen the RST flag appears at the beginning and the ACK flag appears at the end of the connection

DWhen the FIN flag appears at the beginning and the SYN flag appears at the end of the connection

Show Suggested Answer

Suggested Answer: B

Circuit-level gateway firewall technology operates at the session layer of the OSI model. This type of firewall validates TCP or UDP sessions before allowing traffic through, without inspecting the contents of the data packets. It acts as a handshaking device between trusted clients or servers and untrusted hosts, ensuring that the session packets adhere to established rules for a connection.The session layer, which is Layer 5 in the OSI model, is responsible for setting up, managing, and terminating the connections between applications1234.

by Aja at Aug 07, 2024, 10:00 PM

Limited Time Offer

25%

Off

Get Premium 312-38 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Stephen

4 hours ago

Wait, wait, wait... aren't we supposed to be looking for the normal traffic pattern? I'm pretty sure that's when the SYN flag kicks things off and the FIN flag wraps it up. B is the way to go!

upvoted 0 times

...

Lemuel

5 days ago

Nah, I'm pretty sure the correct answer is when the RST flag appears at the beginning and the ACK flag appears at the end. That's option C.

upvoted 0 times

...

Wenona

6 days ago

Hmm, I think the baseline for normal traffic would be when the SYN flag appears at the beginning and the FIN flag appears at the end of the connection. That's option B, right?

upvoted 0 times

...

I think the correct answer is C) When the RST flag appears at the beginning and the ACK flag appears at the end of the connection. This makes more sense in terms of establishing a baseline for normal traffic.

upvoted 0 times

...

Lonna

21 days ago

I disagree, I believe it's when the ACK flag appears at the beginning and the RST flag appears at the end of the connection.

upvoted 0 times

...

Billi

22 days ago

I think the baseline for normal traffic is when the SYN flag appears at the beginning and the FIN flag appears at the end of the connection.

upvoted 0 times

...