Exam 312-50v12 topic 1 question 286 discussion

Actual exam question from ECCouncil's 312-50v12

Question #: 286
Topic #: 1

Harris is attempting to identify the OS running on his target machine. He inspected the initial TTL in the IP header and the related TCP window size and obtained the following results:

TTL: 64 -

Window Size: 5840 -

What the OS running on the target machine?

A. Windows OS
B. Mac OS
C. Linux OS
D. Solaris OS

Show Suggested Answer

Suggested Answer: C 🗳️

by qtygbapjpesdayazko at Feb. 24, 2024, 12:59 p.m.

Comments

Submit Cancel

e020fdc

1 month, 1 week ago

Selected Answer: C

TTL Analysis: Different OS families set different default TTL values: Windows: 128 Linux/Unix: 64 Solaris: 255 Mac OS (based on BSD): typically 64 A TTL of 64 suggests Linux, Mac OS, or any Unix-like OS. TCP Window Size Analysis: Common default TCP window sizes: Linux: 5840 Windows: 8192 Mac OS: varies, often higher (65535 or 4128, depending on version) Solaris: typically 8760 or 49152 So, a TCP window size of 5840 is a strong indicator of Linux.

upvoted 1 times

...