CCNP Security 642-618 Practice Exam (31-35)

Refer to the exhibit.
What can be determined about the connection status?
A. The output is showing normal activity to the inside web server.
B. Many HTTP connections to the web server have successfully completed the three-way TCP handshake.
C. Many embryonic connections are made from random sources to the web server.
D. The host is triggering SYN flood attacks against random hosts on the outside.
E. The web server is terminating all the incoming HTTP connections.
Answer: C

Read More …