156-110: Check Point Certified Security Principles Associate (CCSPA)

TCP/IP stack fingerprinting uses response characteristics such as TCP initial sequence-number sampling, IP ID sequence behavior, and initial TTL values to match a host against operating-system fingerprints. Address spoofing falsifies a packet’s apparent source address and is not a target operating-system fingerprinting attribute.