nerdexam
EC-Council

EC0-350 · Question #664

This packet was taken from a packet sniffer that monitors a Web server. This packet was originally 1514 bytes long, but only the first 512 bytes are shown here. This is the standard hexdump…

The correct answer is B. IIS 4.0. See the full explanation below for the reasoning.

Question

This packet was taken from a packet sniffer that monitors a Web server. This packet was originally 1514 bytes long, but only the first 512 bytes are shown here. This is the standard hexdump representation of a network packet, before being decoded. A hexdump has three columns: the offset of each line, the hexadecimal data, and the ASCII equivalent. This packet contains a 14-byte Ethernet header, a 20-byte IP header, a 20-byte TCP header, an HTTP header ending in two line-feeds (0D 0A 0D 0A) and then the data. By examining the packet identify the name and version of the Web server?

Exhibit

EC0-350 question #664 exhibit

Options

  • AApache 1.2
  • BIIS 4.0
  • CIIS 5.0
  • DLinux WServer 2.3

How the community answered

(56 responses)
  • A
    9% (5)
  • B
    73% (41)
  • C
    4% (2)
  • D
    14% (8)

Community Discussion

No community discussion yet for this question.

Full EC0-350 Practice