nerdexam
GIAC

GCIH · Question #323

Which of the following is used to determine the operating system on the remote computer in a network environment?

The correct answer is C. OS Fingerprinting. OS Fingerprinting is the specific technique used to identify the operating system running on a remote host by analyzing network responses.

Reconnaissance, Scanning, and Enumeration

Question

Which of the following is used to determine the operating system on the remote computer in a network environment?

Options

  • ASpoofing
  • BReconnaissance
  • COS Fingerprinting
  • DSocial engineering

How the community answered

(44 responses)
  • B
    5% (2)
  • C
    93% (41)
  • D
    2% (1)

Why each option

OS Fingerprinting is the specific technique used to identify the operating system running on a remote host by analyzing network responses.

ASpoofing

Spoofing is the act of falsifying a source address or identity, not a method for discovering remote OS information.

BReconnaissance

Reconnaissance is a broad category of information-gathering activities, of which OS fingerprinting is one subset, making it too general to be the specific correct answer.

COS FingerprintingCorrect

OS Fingerprinting works by sending crafted packets and analyzing the unique responses from a target host, such as TCP/IP stack behavior, TTL values, and banner information. These subtle differences in implementation allow tools like Nmap to identify the remote OS with high accuracy. It is the dedicated technique for this purpose, distinct from broader recon activities.

DSocial engineering

Social engineering manipulates people psychologically to divulge information and does not involve technical network analysis of a remote system.

Concept tested: OS fingerprinting for remote host identification

Source: https://nmap.org/book/osdetect.html

Topics

#OS fingerprinting#passive reconnaissance#TTL analysis

Community Discussion

No community discussion yet for this question.

Full GCIH Practice