Enumeration Countermeasures CEH Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A security administrator is hardening a small office network that hosts a public web server and an internal file server. The administrator wants to reduce the effectiveness of network and port scanning from the internet while keeping the web server accessible. Which combination of measures best achieves this goal?

   • APlace the web server in a DMZ, apply firewall rules to allow only ports 80/443 from the internet, and block ICMP echo requests at the perimeter.
   • BConfigure the web server to respond to ICMP echo requests and enable port forwarding for all TCP ports to the web server.
   • CDisable the file server's SMB service and enable SNMP with a strong community string on the web server.
   • DMove the web server to the internal LAN and rely on the internal firewall to block all inbound traffic except from the internal file server.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the primary purpose of implementing enumeration countermeasures in an organization's security posture?

   • ATo ensure that all system logs are stored in a centralized SIEM for compliance purposes
   • BTo prevent attackers from gathering detailed information about systems, users, and network resources that could be used to plan further attacks
   • CTo guarantee that no external attacker can ever connect to the network
   • DTo eliminate all network traffic that could be observed by external parties
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   An Active Directory environment was found to be leaking user account information through SMB null sessions and verbose login error messages. The administrator wants to reduce enumeration while maintaining user productivity. Which combination of changes is most appropriate?

   • AEnable SMB null sessions for legacy applications and keep detailed login error messages to help users remember their usernames.
   • BDisable SMB null sessions, enforce SMB signing, and configure generic login error messages that do not reveal whether a username exists.
   • CImplement account lockout policies and multi-factor authentication, but leave SMB null sessions enabled.
   • DDisable SMB entirely and require all file access to use FTP with anonymous read-only access.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A network administrator discovers that an attacker was able to query SNMP information from network devices using the default community string 'public'. The administrator needs to reduce the risk of SNMP enumeration while still allowing monitoring tools to poll device statistics. Which action is the most effective first step?

   • AEnable SNMPv3 with authentication but leave the community string as 'public'.
   • BChange community strings to strong, unpredictable values and restrict SNMP access by source IP.
   • CSet the SNMP community string to a long but common word like 'monitoring'.
   • DDisable SNMP entirely on all devices and use only SSH for management.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Why is using strong encryption (e.g., WPA3) an effective countermeasure against wireless enumeration?

   • AIt increases the signal range of the wireless network
   • BIt prevents unauthorized devices from connecting to the network
   • CIt hides the SSID from all wireless scanners
   • DIt prevents attackers from easily capturing and deciphering network traffic to discover SSIDs and connected devices
   Reveal Solution Discussion Select an answer first