Q1: Can 172.20.241.39 ping 172.20.240.11? Why or why not? Q2: If an attacker would scan the subnet 172.20.241.0/24, how many IPs will the scanner scan? Q3: Where (which machine) can the attacker install the scanner to conduct the scanning in Q2? Identify the IP and explain it. Q4: Assume that an external attacker is sending TCP SYN flood to this network. Which network interface (IP) shall be detecting the attack traffic? Also I am wondering what the purpose of the Windows 7 Machine on the external network could be? CCDC 2016.