Exam 312-50v13 Topic 1 Question 265 Discussion
Actual exam question for ECCouncil's 312-50v13 exam
Question #: 265
Topic #: 1
Question #: 265
Topic #: 1
During an internal red team engagement, a penetration tester is tasked with mapping the network topology of an organization with multiple segmented subnets. The tester initiates a series of traceroutes from a compromised host to various internal devices across these segments. Upon analyzing the output, the tester observes that a specific IP address, 10.10.10.1, consistently appears as the second-to-last hop before reaching several target systems located in different IP ranges. Despite varying final destination IPs, this intermediate address remains constant. No signs of DNS spoofing, ICMP anomalies, or host-level misconfigurations are present. What does this repeated hop pattern most likely indicate in the context of network architecture?
Suggested Answer: A Vote an answer
A consistent intermediate hop appearing just before multiple destinations across different subnets indicates a central routing device. This is characteristic of a core or distribution router that interconnects segmented internal networks and forwards traffic toward various destination subnets.
by Ben at Aug 10, 2026, 05:04 AM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).