Certified Ethical Hacker (CEH v12) — Question 284

Harris is attempting to identify the OS running on his target machine. He inspected the initial TTL in the IP header and the related TCP window size and obtained the following results:

TTL: 64 -

Window Size: 5840 -

What the OS running on the target machine?

Answer options

• A. Windows OS
• B. Mac OS
• C. Linux OS
• D. Solaris OS

Correct answer: C

Explanation

The correct answer is Linux OS, as a TTL of 64 and a TCP window size of 5840 are typical characteristics of Linux systems. Windows OS usually has a higher initial TTL, and Mac OS and Solaris OS have different window sizes that do not match these values.