A server administrator is hardening a Linux server that runs a database and a web application. The server also has several unused services running, including Telnet and an outdated version of FTP. The administrator wants to reduce service enumeration while keeping the database and web application available. Which action should be taken?

Keep Telnet and FTP enabled but restrict them to the localhost interface.

Change the Telnet and FTP ports to non-standard numbers and leave them enabled.

Disable the database service and rely on the web application to handle all data storage.

Disable the unused Telnet and FTP services, apply the latest security patches to the remaining services, and configure the firewall to allow only the ports needed by the database and web application.

A company runs a legacy application that requires Telnet for management on a server. The security team wants to reduce service enumeration risk but cannot replace the application immediately. Which approach best balances security and operational constraints?

Apply a patch to Telnet that adds encryption.

Restrict Telnet access to specific management IPs via firewall rules and use a jump host.

Keep Telnet open to all IPs but change the port number.

Disable Telnet and use SSH, even if the legacy app breaks.

A web server is returning detailed version banners and allowing directory browsing, which has helped an attacker map the application structure. The administrator wants to reduce information disclosure without affecting the web application's functionality. Which action should be taken?

Move the web server behind a firewall that blocks all HTTP traffic except from the internal network.

Enable directory browsing but restrict it to authenticated users, and leave server headers unchanged.

Install a web application firewall (WAF) and leave directory browsing enabled because the WAF will block all enumeration attempts.

Disable directory browsing, remove or obscure server version headers, and configure the web server to return generic error pages.

A Windows administrator is hardening a file server that must support legacy applications that rely on SMBv1. The administrator has been instructed to reduce SMB enumeration risks while maintaining compatibility. Which approach best balances security and compatibility?

Keep SMBv1 enabled on the main network and rely on the firewall to block external access to port 445.

Enable SMBv1 and SMB signing, but leave null sessions enabled to support legacy applications.

Keep SMBv1 enabled only on a separate VLAN for legacy applications, enforce SMB signing on all SMB versions, and disable null sessions on the file server.

Disable SMBv1 entirely and require all legacy applications to migrate to SMBv2 or SMBv3 immediately.

What is the primary purpose of using TLS with LDAP (LDAPS)?

To speed up LDAP queries by compressing data

To encrypt LDAP traffic and prevent attackers from intercepting sensitive information during enumeration

To restrict LDAP access to specific IP addresses

To allow anonymous binds to the LDAP directory

EC-CouncilCertified Ethical Hacker

Domain 2Objective 7

Enumeration Countermeasures CEH Practice Questions (Page 4)

Part of the Reconnaissance Techniques domain, which makes up ~14% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~13–22 in this domain), expect 2–3 from this objective — we provide 65 practice questions to prepare you well beyond it. (estimate)

65questions here

13free pages

16concepts

16 Concepts in This Objective

Enumeration Countermeasures Overview
Network Enumeration Countermeasures
Port Scanning Countermeasures
Service Enumeration Countermeasures
SNMP Enumeration Countermeasures
DNS Enumeration Countermeasures
Active Directory Enumeration Countermeasures
SMB Enumeration Countermeasures
LDAP Enumeration Countermeasures
Email Enumeration Countermeasures
User Enumeration Countermeasures
Web Enumeration Countermeasures
Wireless Enumeration Countermeasures
Cloud Enumeration Countermeasures
IoT Enumeration Countermeasures
Enumeration Countermeasure Tools and Techniques

Questions 16–20

16application · medium
A server administrator is hardening a Linux server that runs a database and a web application. The server also has several unused services running, including Telnet and an outdated version of FTP. The administrator wants to reduce service enumeration while keeping the database and web application available. Which action should be taken?
Select an answer first
17expert · hard
A company runs a legacy application that requires Telnet for management on a server. The security team wants to reduce service enumeration risk but cannot replace the application immediately. Which approach best balances security and operational constraints?
Select an answer first
18application · medium
A web server is returning detailed version banners and allowing directory browsing, which has helped an attacker map the application structure. The administrator wants to reduce information disclosure without affecting the web application's functionality. Which action should be taken?
Select an answer first
19expert · hard
A Windows administrator is hardening a file server that must support legacy applications that rely on SMBv1. The administrator has been instructed to reduce SMB enumeration risks while maintaining compatibility. Which approach best balances security and compatibility?
Select an answer first
20foundation · easy
What is the primary purpose of using TLS with LDAP (LDAPS)?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.