Question

You are the security analyst for a small corporate network. you have heard complaints that the corpserver ( ) seems to be very unresponsive. you suspect the server may be under a syn attack. in this lab, your task is to:

a. use zenmap to find which ports on corpserver ( ) are open.
b. use wireshark and the enp2s0 network interface to determine if the corpserver is under a syn attack.
c. analyze the packets captured.

Answer 1

option b,To find open ports on the corpserver, use Zenmap. Use Wireshark and the enp2s0 network interface to determine if the corpserver is under a SYN attack. Analyze the captured packets to identify patterns or anomalies.

Step-by-step explanation:

The subject of this question is Computers and Technology and the grade level is College.

In order to find which ports on the corpserver are open, you can use Zenmap. Zenmap is a graphical user interface (GUI) for Nmap, a network scanning tool. By scanning the corpserver's IP address using Zenmap, you will be able to identify the open ports and their associated services.

To determine if the corpserver is under a SYN attack, you can use Wireshark with the enp2s0 network interface. Wireshark is a network protocol analyzer. By capturing the network traffic on the specified interface, you can analyze the TCP packets and look for characteristics of a SYN flood attack, such as a high volume of SYN packets with no corresponding ACK packets.

Once you have captured the packets using Wireshark, you can analyze them to identify any patterns or anomalies that may indicate a SYN attack. This could include a high number of SYN packets from different source IP addresses, a large number of retransmissions, or a sudden increase in network traffic.