Which practice is an effective countermeasure to detect and respond to Active Directory enumeration attempts?

Auditing access to sensitive AD objects and monitoring for unusual query patterns

Disabling all user accounts to prevent any access

Allowing anonymous LDAP binds to simplify authentication

Using the same password for all service accounts to simplify management

Why is using generic email addresses (e.g., info@company.com) a countermeasure against email enumeration?

It prevents attackers from discovering individual user email addresses through directory harvesting

It reduces the amount of spam received by the organization

It ensures that all emails are encrypted in transit

It allows the organization to use a single mailbox for all employees

What is the primary purpose of enforcing least privilege in Active Directory?

To limit the amount of sensitive information that users and attackers can access, reducing the impact of enumeration

To ensure that all users have the same level of access for simplicity

To allow administrators to monitor all user activities

To prevent users from changing their own passwords

Which network-level measure is most effective in preventing an external attacker from discovering internal network structure through ICMP-based enumeration?

Assigning public IP addresses to all internal hosts

Enabling SNMP read-only community strings on all routers

Configuring all switches to use dynamic trunking protocol (DTP)

Blocking all incoming ICMP echo requests at the perimeter firewall

What is the most effective way to prevent enumeration of a service that is not needed by the organization?

Configure the service to require strong authentication

Apply the latest security patches to the service

Change the service's default port to a non-standard port

EC-CouncilCertified Ethical Hacker

Domain 2Objective 7

Enumeration Countermeasures CEH Practice Questions (Page 11)

Part of the Reconnaissance Techniques domain, which makes up ~14% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~13–22 in this domain), expect 2–3 from this objective — we provide 65 practice questions to prepare you well beyond it. (estimate)

65questions here

13free pages

16concepts

16 Concepts in This Objective

Enumeration Countermeasures Overview
Network Enumeration Countermeasures
Port Scanning Countermeasures
Service Enumeration Countermeasures
SNMP Enumeration Countermeasures
DNS Enumeration Countermeasures
Active Directory Enumeration Countermeasures
SMB Enumeration Countermeasures
LDAP Enumeration Countermeasures
Email Enumeration Countermeasures
User Enumeration Countermeasures
Web Enumeration Countermeasures
Wireless Enumeration Countermeasures
Cloud Enumeration Countermeasures
IoT Enumeration Countermeasures
Enumeration Countermeasure Tools and Techniques

Questions 51–55

51foundation · easy
Which practice is an effective countermeasure to detect and respond to Active Directory enumeration attempts?
Select an answer first
52foundation · easy
Why is using generic email addresses (e.g., info@company.com) a countermeasure against email enumeration?
Select an answer first
53foundation · easy
What is the primary purpose of enforcing least privilege in Active Directory?
Select an answer first
54foundation · easy
Which network-level measure is most effective in preventing an external attacker from discovering internal network structure through ICMP-based enumeration?
Select an answer first
55foundation · easy
What is the most effective way to prevent enumeration of a service that is not needed by the organization?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.