Enumeration Countermeasures CEH Practice Questions (Page 12)

Questions 56–60

1. 56foundation · easy

   What is the primary purpose of using identity and access management (IAM) in cloud environments to prevent enumeration?

   • ATo provide a backup of all cloud data
   • BTo control which users and services can access cloud resources, limiting the information that unauthorized users can enumerate
   • CTo automatically patch all cloud resources
   • DTo encrypt all data stored in the cloud
   Reveal Solution Discussion Select an answer first
2. 57application · medium

   A small business wants to secure its wireless network against wardriving and unauthorized enumeration of connected devices. The business must support a mix of older and newer laptops. Which measure is the most effective first step?

   • AUse WEP encryption because it is compatible with older laptops, and set the SSID to a non-descriptive name.
   • BEnable MAC filtering and keep the SSID broadcast enabled so authorized devices can connect more easily.
   • CDisable the wireless network entirely and require all employees to use wired connections.
   • DEnable WPA2 or WPA3 encryption with a strong passphrase, and disable SSID broadcast.
   Reveal Solution Discussion Select an answer first
4. 58foundation · easy

   How do network security groups (NSGs) help prevent cloud enumeration?

   • ABy encrypting all data in transit between cloud resources
   • BBy filtering traffic to and from cloud resources, limiting the exposed services that can be enumerated
   • CBy providing a backup of cloud resources
   • DBy automatically detecting and alerting on enumeration attempts
   Reveal Solution Discussion Select an answer first
5. 59expert · hard

   A company is deploying a multi-tier application in a public cloud. The application consists of a web tier, an application tier, and a database tier. The security team wants to prevent enumeration of the application and database tiers from the internet while allowing the web tier to be publicly accessible. Which architecture best meets these requirements?

   • APlace the web tier in a public subnet with a security group that allows only ports 80/443 from the internet, and place the application and database tiers in private subnets with security groups that only allow traffic from the web tier.
   • BPlace the web and application tiers in a public subnet and the database tier in a private subnet, but allow the database to be accessed from the internet for remote administration.
   • CUse a single security group for all tiers that allows all inbound traffic from the internet, and rely on the cloud provider's monitoring to detect enumeration.
   • DPlace all tiers in the same public subnet and rely on the operating system firewall on each instance to block external access.
   Reveal Solution Discussion Select an answer first
6. 60foundation · easy

   Why do generic error messages help prevent user enumeration?

   • AThey redirect users to a different login page
   • BThey encrypt the login credentials during transmission
   • CThey lock the account after a single failed attempt
   • DThey prevent attackers from distinguishing between valid and invalid usernames
   Reveal Solution Discussion Select an answer first