🔥 40% Off Crucial Exams Memberships — Deal ends today!

1 hour, 28 minutes remaining!

Certified Ethical Hacker (CEH) Practice Question

While monitoring an enterprise LAN, you notice the following in a packet capture: Host A and Host B suddenly start sending large numbers of duplicate ACKs with the same acknowledgment numbers, and within a few milliseconds Host B issues a TCP RST that ends the flow. From a network-level session hijacking perspective, what is the most plausible explanation for this behavior?

  • An ICMP destination-unreachable message from a router caused Host B to close the session, producing the observed traffic.

  • The packets show normal congestion control; duplicate ACKs followed by a reset occur when the congestion window reaches zero.

  • A spoofing host injected TCP segments with an incorrect sequence number, creating an ACK storm that culminated in a connection reset.

  • Host A legitimately enabled TCP Fast Open, which can generate duplicate ACKs during option negotiation.

Certified Ethical Hacker (CEH)
Network and Perimeter Hacking
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot