350-701 Security Concepts Practice Question
A security analyst is reviewing logs and identifies numerous ICMP echo requests from an external IP address to multiple internal hosts. Which type of reconnaissance activity is this?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Active scanning
ICMP echo requests (ping sweeps) are used in active scanning to identify live hosts.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Active scanning
Why this is correct
Active scanning involves sending probes (e.g., ICMP echo requests) to discover hosts and services.
- ✗
Passive OSINT
Why it's wrong here
Passive OSINT involves gathering information without direct interaction, such as from public records or social media.
- ✗
ARP spoofing
Why it's wrong here
ARP spoofing is a man-in-the-middle attack that associates an attacker's MAC address with a victim's IP.
- ✗
DNS cache poisoning
Why it's wrong here
DNS cache poisoning is an attack that corrupts DNS resolver caches.
Go deeper
Related to this question
About these practice questions
This 350-701 question is part of Courseiva's 978-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.