Refer to the exhibit.
What can be determined about the connection status?
A.
The output is showing normal activity to the inside 10.1.1.50 web server.
B.
Many HTTP connections to the 10.1.1.50 web server have successfully completed the threeway TCP handshake.
C.
Many embryonic connections are made from random sources to the 10.1.1.50 web server.
D.
The 10.1.1.50 host is triggering SYN flood attacks against random hosts on the outside.
E.
The 10.1.1.50 web server is terminating all the incoming HTTP connections.
Explanation: