In the example command 'firewalk -F 80 10.10.10.1', which IP is the target host used for the scan?

In the example command 'firewalk -F 80 10.10.10.1', which IP is the target host used for the scan?

• A. 172.16.28.95
• B. 10.10.150.1
• C. This command is using FIN packets, which cannot scan target hosts
• D. Firewalk does not scan target hosts

Answer: (A)

Firewalk is used to determine which hosts behind a firewall can be reached for a given service by sending probes through the firewall and observing what gets through. In the example command, the address at the end is the next hop into the protected network—the gateway interface you’re using to reach the internal network. The actual host behind the firewall that you’re trying to probe is the internal target address, which in this scenario is 172.16.28.95. The gateway address 10.10.10.1 is simply the path you’re testing through, not the host being scanned. The other options don’t fit because they either reference addresses not involved in this command, or make inaccurate statements about what Firewalk does (for example, that it cannot scan target hosts or that only FIN packets are used to scan).

Firewalk is used to determine which hosts behind a firewall can be reached for a given service by sending probes through the firewall and observing what gets through. In the example command, the address at the end is the next hop into the protected network—the gateway interface you’re using to reach the internal network. The actual host behind the firewall that you’re trying to probe is the internal target address, which in this scenario is 172.16.28.95. The gateway address 10.10.10.1 is simply the path you’re testing through, not the host being scanned.

The other options don’t fit because they either reference addresses not involved in this command, or make inaccurate statements about what Firewalk does (for example, that it cannot scan target hosts or that only FIN packets are used to scan).