Enumeration Countermeasures CEH Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   How does network segmentation help prevent IoT enumeration?

   • AIt isolates IoT devices from the main corporate network, limiting the ability of attackers to enumerate other systems if an IoT device is compromised
   • BIt hides the existence of IoT devices from all wireless scanners
   • CIt encrypts all communication between IoT devices and the internet
   • DIt automatically patches IoT devices
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company's customer portal allows attackers to enumerate valid usernames by observing different responses to the login and registration forms. The security team wants to prevent this without degrading the user experience. Which measure is most effective?

   • AReturn the same generic error message for invalid username and invalid password, and implement rate limiting on login and registration endpoints.
   • BDisable the registration form and require new users to contact support to create accounts.
   • CDisplay a detailed error message that tells the user whether the username exists, but require CAPTCHA after three failed attempts.
   • DImplement multi-factor authentication for all users and leave the login error messages unchanged.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company has moved a web application to a public cloud. The security team is concerned about attackers enumerating storage buckets and virtual machines. Which combination of controls is most effective?

   • AEnable logging but do not configure alerts.
   • BRely on the cloud provider's default security settings.
   • CDisable all public endpoints and use only a VPN for access.
   • DUse IAM policies to restrict access and network security groups to limit inbound traffic.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Why is changing default credentials on IoT devices an important countermeasure against enumeration?

   • ADefault credentials allow the device to connect to the internet more securely
   • BDefault credentials are well-known and can be used by attackers to access the device and enumerate its configuration
   • CDefault credentials are encrypted, so changing them is not necessary
   • DDefault credentials are unique to each device, so they are safe
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company's DNS server is leaking internal hostnames and IP addresses to the internet through zone transfers and verbose responses. The administrator wants to prevent this information disclosure while still providing authoritative DNS for public services. Which configuration should the administrator implement?

   • AUse the same DNS zone for internal and external queries and set the 'allow-transfer' option to the IP address of the primary server.
   • BConfigure split-horizon DNS so internal records are only served on the internal network, and restrict zone transfers to authorized secondary servers only.
   • CEnable DNSSEC on the internal DNS server only and disable all logging on the public DNS server.
   • DDisable recursion on the public-facing DNS server and allow zone transfers from any IP address on the internet.
   Reveal Solution Discussion Select an answer first