Which statement is true about TTL mappings in the dataset?

• A. The TTL values include 254 and 255, mapping to Solaris / AIX and Network respectively
• B. The TTL values include 253 and 254, mapping to Network and Solaris / AIX
• C. The TTL values include 255 and 256, mapping to Windows XP and Windows Vista
• D. The TTL values only include 254, mapping to Solaris / AIX

Answer: (A)

TTL values in the dataset reflect fixed initial values used by different operating systems, which helps fingerprint hosts. Here, 254 is mapped to Solaris / AIX and 255 is mapped to Network devices, so those two values appear together as the observed mapping. That makes this statement true because it matches what the dataset shows. The other options don’t fit: TTL values never reach 256 since the field is eight bits; a single value like 254 alone would omit the 255 mapping; and Windows XP/Vista aren’t paired with those TTL values in this dataset.