What kind of ICMP message can be used by threat actors to map an internal IP network?
- ICMP echo request
- ICMP redirects
- ICMP router discovery
- ICMP mask reply
Explanation: Common ICMP messages of interest to threat actors include these:
- ICMP echo request and echo reply: used to perform host verification and DoS attacks
- ICMP unreachable: used to perform network reconnaissance and scanning attacks
- ICMP mask reply: used to map an internal IP network
- ICMP redirects: used to lure a target host into sending all traffic through a compromised device and create a man-in-the-middle attack
- ICMP router discovery: used to inject bogus route entries into the routing table of a target host
Related exam: CyberOps Associate (Version 1.0) - Module 16: Attacking the Foundation Quiz Answers
Related exam: 3.4.2 Attacking the Foundation Quiz
Related exam: Endpoint Security: My Knowledge Check Answers
