Which scan sends ACK probe packets to multiple ports and analyzes the TTL value of the RST packets received?

Which scan sends ACK probe packets to multiple ports and analyzes the TTL value of the RST packets received?

• A. Window-Based ACK Flag Scanning
• B. ACK Flag Probe Scan
• C. TTL-Based ACK Flag Probing Scanning
• D. INIT Scan

Answer: (B)

The technique being tested is sending ACK packets as probes across many ports and watching how the target replies, specifically looking at the RST responses’ TTL values to infer port state and firewall behavior. This is exactly what an ACK Flag Probe Scan does: it uses ACK packets to probe ports and analyzes the TTL of the RST replies to determine whether ports are filtered or open/closed in a way that reveals the network’s filtering rules. The other approaches don’t match this method as closely: they rely on different flags, window behavior, or initial handshakes rather than a broad ACK probing strategy with TTL-based interpretation of RST responses.

The technique being tested is sending ACK packets as probes across many ports and watching how the target replies, specifically looking at the RST responses’ TTL values to infer port state and firewall behavior. This is exactly what an ACK Flag Probe Scan does: it uses ACK packets to probe ports and analyzes the TTL of the RST replies to determine whether ports are filtered or open/closed in a way that reveals the network’s filtering rules. The other approaches don’t match this method as closely: they rely on different flags, window behavior, or initial handshakes rather than a broad ACK probing strategy with TTL-based interpretation of RST responses.