ECSA v10: EC-Council Certified Security Analyst v10Demo

By ECCouncil · Question Mode

QuestionQ150

Network Penetration Testing Methodology – External

Smith, a penetration tester, has been hired to assess an organization’s security posture and is using Wireshark to identify the operating systems present on the network. What can be inferred from the selected packet in the Wireshark screenshot below?

Question Image

  • A The machine with IP 10.0.0.10 is running on Linux
  • B The machine with IP 10.0.0.12 is running on Linux
  • C The machine with IP 10.0.0.12 is running on Windows
  • D The machine with IP10.0.0.10 is running on Windows
Explanation

The packet originated from 10.0.0.12 and has a TTL of 64, which is the common default initial TTL for Linux systems. With no apparent routing hops reducing it, this supports inferring that 10.0.0.12 is running Linux.

Community Discussion

No comments yet. Be the first to start the discussion!