Normally is recommended to avoid triggering the vulnerability while checking. Indeed a test like this likely will make alarms to sound (if they are present :) ).

I would say detecting the software version and if there is a legit answer for the lang cookie would be enough, no need to exploit the traversal here.