Ravi Sir's Cyber Security Cards › Interview Cards
A Blue team sees a sudden burst of SYN packets to many ports on one EIP. Likely interpretation?
A Blue team sees a sudden burst of SYN packets to many ports on one EIP. Likely interpretation? A. Normal DNS recursion B. Possible port scan / recon noise C. Successful TLS handshake only D. SPF pass for email B. Possible port scan / recon noise A sudden burst of SYN packets to many ports on one ad
Read card text
What this card says
Options
A. Normal DNS recursion
B. Possible port scan / recon noise
C. Successful TLS handshake only
D. SPF pass for email
Correct answer
B. Possible port scan / recon noise
Why
A sudden burst of SYN packets to many ports on one address is the classic pattern of a port scan, so a defender reads it as recon noise and checks the source.
Learn more in the lesson: 48.6 CEH-Style Practice Questions – Set A (Modules 01–10)