What is the purpose of hiding the SSID in a wireless network?

To increase the wireless signal strength

To prevent all unauthorized devices from connecting

To make the network less visible to casual wireless scanners, reducing the chance of enumeration

To encrypt all wireless traffic

A network has many legacy devices that only support SNMPv1 and SNMPv2c. The security team wants to prevent SNMP enumeration but cannot upgrade the devices. Which approach is most effective?

Place SNMP devices on a separate management VLAN and restrict SNMP access to monitoring servers.

Disable SNMP on all legacy devices.

Use SNMPv3 with authentication even though the devices don't support it.

Set the community string to a very long random value and leave SNMP open to all.

A network administrator discovers that an attacker has been querying SNMP to enumerate device details and network topology. The administrator wants to prevent this while still allowing authorized monitoring tools to poll device status. Which action is the most effective first step?

Disable SNMP on all devices and use a proprietary protocol for monitoring that is not publicly documented.

Use SNMPv1 with the community string 'monitor' and rely on the network's perimeter firewall to block all inbound SNMP traffic.

Set the SNMP community string to a long numeric value and enable SNMP on all interfaces, including the internet-facing interface.

Change the SNMP community strings from the default 'public' and 'private' to strong, unpredictable values, and restrict SNMP access to specific monitoring hosts via firewall rules.

A security team wants to detect enumeration attempts without generating false positives from legitimate scanning tools used by the IT department. Which approach is most effective?

Use a honeypot to detect all enumeration attempts.

Configure the SIEM to exclude known internal scanner IPs and alert on other scan patterns.

Alert on any port scan, regardless of source.

Disable the internal scanning tools to avoid false positives.

A factory has deployed many IoT sensors that use default credentials and are directly connected to the corporate network. The security team wants to reduce the risk of enumeration and compromise. Which action is most important?

Change default credentials and place IoT devices on a separate network segment.

Apply firmware updates but keep default credentials.

Use MAC filtering on the corporate network to allow only known IoT devices.

Disable the IoT devices' web interfaces but keep them on the same network.

EC-CouncilCertified Ethical Hacker

Domain 2Objective 7

Enumeration Countermeasures CEH Practice Questions (Page 13)

Part of the Reconnaissance Techniques domain, which makes up ~14% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~13–22 in this domain), expect 2–3 from this objective — we provide 65 practice questions to prepare you well beyond it. (estimate)

65questions here

13free pages

16concepts

16 Concepts in This Objective

Enumeration Countermeasures Overview
Network Enumeration Countermeasures
Port Scanning Countermeasures
Service Enumeration Countermeasures
SNMP Enumeration Countermeasures
DNS Enumeration Countermeasures
Active Directory Enumeration Countermeasures
SMB Enumeration Countermeasures
LDAP Enumeration Countermeasures
Email Enumeration Countermeasures
User Enumeration Countermeasures
Web Enumeration Countermeasures
Wireless Enumeration Countermeasures
Cloud Enumeration Countermeasures
IoT Enumeration Countermeasures
Enumeration Countermeasure Tools and Techniques

Questions 61–65

61foundation · easy
What is the purpose of hiding the SSID in a wireless network?
Select an answer first
62expert · hard
A network has many legacy devices that only support SNMPv1 and SNMPv2c. The security team wants to prevent SNMP enumeration but cannot upgrade the devices. Which approach is most effective?
Select an answer first
63application · medium
A network administrator discovers that an attacker has been querying SNMP to enumerate device details and network topology. The administrator wants to prevent this while still allowing authorized monitoring tools to poll device status. Which action is the most effective first step?
Select an answer first
64expert · hard
A security team wants to detect enumeration attempts without generating false positives from legitimate scanning tools used by the IT department. Which approach is most effective?
Select an answer first
65application · medium
A factory has deployed many IoT sensors that use default credentials and are directly connected to the corporate network. The security team wants to reduce the risk of enumeration and compromise. Which action is most important?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.