Crucial Exams

Certified Ethical Hacker (CEH) Practice Question

While conducting an external assessment you use Netcat to grab the banner of a web service listening on TCP port 80 and simultaneously capture the 3-way handshake in Wireshark. The banner returns

Server: Microsoft-IIS/10.0

and the SYN/ACK packet shows an initial TTL value of 128. Based on this information, which of the following is the most accurate assessment of the remote host?

  • It is an Ubuntu 16.04 server running Apache 2.4 but misreports its banner.

  • A stateful firewall is normalizing TTL values, so the operating system cannot be determined.

  • It is a Linux system with a custom kernel that purposely increases its initial TTL to 128.

  • The system is most likely a Windows Server 2016/2019 host running IIS 10.0.

Certified Ethical Hacker (CEH)
Reconnaissance Techniques
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot