SYN scanning is a stealthy TCP scanning technique used by attackers to detect open ports.
How SYN scanning works:
The attacker sends aSYN packetto a target port.
If the port isopen, the target responds with aSYN-ACK.
Instead of completing the handshake with anACK, the attacker sends anRST (reset) packet, leaving the connection half-open.
Why is this statement false?
SYN scanning does NOT establish a full connection (three-way handshake).
It may not always be recorded in system logs, depending on firewall settings.
HCIP-Security References:
Huawei HCIP-Security Guide → TCP SYN Scanning & Intrusion Detection
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit