ECSA v10: EC-Council Certified Security Analyst v10

By ECCouncil · Question Mode

QuestionQ150

VerifiedNetwork Penetration Testing Methodology – External

Smith, a penetration tester, has been hired to assess an organization’s security posture and is using Wireshark to identify the operating systems present on the network. What can be inferred from the selected packet in the Wireshark screenshot below?

Question Image

Explanation

The packet originated from 10.0.0.12 and has a TTL of 64, which is the common default initial TTL for Linux systems. With no apparent routing hops reducing it, this supports inferring that 10.0.0.12 is running Linux.

Community Discussion

No comments yet. Be the first to start the discussion!