Exam 312-50v11 topic 1 question 206 discussion

Actual exam question from ECCouncil's 312-50v11

Question #: 206
Topic #: 1

Henry is a cyber security specialist hired by BlackEye `" Cyber Security Solutions. He was tasked with discovering the operating system (OS) of a host. He used the Unicornscan tool to discover the OS of the target system. As a result, he obtained a TTL value, which indicates that the target system is running a Windows
OS.
Identify the TTL value Henry obtained, which indicates that the target OS is Windows.

A. 128
B. 255
C. 64
D. 138

Show Suggested Answer

Suggested Answer: A 🗳️

by Musky0512 at June 29, 2021, 6:41 a.m.

Comments

Submit Cancel

Silascarter

Highly Voted 2 years, 3 months ago

Time to Live (TTL) represents to number of 'hops' a packet can take before it is considered invalid. For Windows/Windows Phone, this value is 128. This value is 64 for Linux/Android.

upvoted 7 times

...

victorfs

Most Recent 7 months, 3 weeks ago

Selected Answer: A

The correcto option is A. 128 Is easy. The TTL 128 for Windows and 64 for Linux

upvoted 1 times

...

Daniel8660

1 year, 2 months ago

Selected Answer: A

How to Identify Target System OS Attackers can identify the OS running on the target machine by looking at the Time To Live (TTL) and TCP window size in the IP header of the first packet in a TCP session.Sniff/capture the response generated from the target machine using packet-sniffing tools like Wireshark and observe the TTL and TCP window size fields. #Time to Live (TTL) 128 is Windows / TTL 64 is Linux (P.341/325)

upvoted 2 times

...

Novmejst

2 years ago

A. 128 - Windows TTL 128, Linux TTL 64, OpenBSD 255 ... https://subinsb.com/default-device-ttl-values/

upvoted 4 times

...

ANDRESCB1988

2 years, 5 months ago

correct

upvoted 2 times

...