What is the primary purpose of using honeypots as an enumeration countermeasure?

To replace the need for firewalls and IDS

To encrypt all network traffic to prevent eavesdropping

To attract and detect attackers who are probing the network, allowing defenders to learn about their techniques

To block all port scanning attempts automatically

Which configuration is most effective in preventing anonymous LDAP enumeration?

Setting the LDAP port to a non-standard number

Disabling anonymous binds and requiring authentication for all LDAP queries

Enabling anonymous binds to allow easier access for all users

Using a complex base DN to hide the directory structure

A web application's password reset feature reveals whether an email address is registered by returning different messages for 'email not found' versus 'reset link sent'. The security team wants to prevent user enumeration while maintaining a usable reset process. Which approach is most effective?

Return a detailed error message only when the email exists, and require CAPTCHA for all reset requests.

Disable the password reset feature entirely and require users to contact support to reset passwords.

Send the reset link only to email addresses that are already in the system and log all failed attempts.

Return the same generic message for both cases and implement rate limiting on the reset endpoint.

A company is migrating a web application to a public cloud and wants to prevent attackers from enumerating the application's underlying infrastructure and open ports. The application must remain accessible to external users. Which cloud-specific countermeasure should be implemented?

Use a private IP address for the application and rely on a VPN for all external access.

Place the application behind a cloud load balancer or web application firewall, and configure network security groups to allow only necessary inbound ports from the internet.

Disable the cloud provider's monitoring and logging to reduce the attack surface.

Assign a public IP address directly to the application VM and open all ports to the internet for easy access.

Which practice is most likely to prevent an attacker from identifying the exact version of a running service?

Applying the latest service pack to the operating system

Changing the service account to a non-privileged user

Using a firewall to block all incoming traffic to the service

Disabling banner grabbing and version disclosure in the service configuration

EC-CouncilCertified Ethical Hacker

Domain 2Objective 7

Enumeration Countermeasures CEH Practice Questions (Page 1)

Part of the Reconnaissance Techniques domain, which makes up ~14% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~13–22 in this domain), expect 2–3 from this objective — we provide 65 practice questions to prepare you well beyond it. (estimate)

65questions here

13free pages

16concepts

16 Concepts in This Objective

Enumeration Countermeasures Overview
Network Enumeration Countermeasures
Port Scanning Countermeasures
Service Enumeration Countermeasures
SNMP Enumeration Countermeasures
DNS Enumeration Countermeasures
Active Directory Enumeration Countermeasures
SMB Enumeration Countermeasures
LDAP Enumeration Countermeasures
Email Enumeration Countermeasures
User Enumeration Countermeasures
Web Enumeration Countermeasures
Wireless Enumeration Countermeasures
Cloud Enumeration Countermeasures
IoT Enumeration Countermeasures
Enumeration Countermeasure Tools and Techniques

Questions 1–5

1foundation · easy
What is the primary purpose of using honeypots as an enumeration countermeasure?
Select an answer first
2foundation · easy
Which configuration is most effective in preventing anonymous LDAP enumeration?
Select an answer first
3application · medium
A web application's password reset feature reveals whether an email address is registered by returning different messages for 'email not found' versus 'reset link sent'. The security team wants to prevent user enumeration while maintaining a usable reset process. Which approach is most effective?
Select an answer first
4application · medium
A company is migrating a web application to a public cloud and wants to prevent attackers from enumerating the application's underlying infrastructure and open ports. The application must remain accessible to external users. Which cloud-specific countermeasure should be implemented?
Select an answer first
5foundation · easy
Which practice is most likely to prevent an attacker from identifying the exact version of a running service?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.