What is the purpose of restricting directory browsing on a web server?

To prevent attackers from listing the contents of directories and discovering hidden files or sensitive data

To encrypt all files stored on the server

To allow only authenticated users to access the website

To increase the speed of web page loading

Which technology is specifically designed to detect and alert on port scanning activity?

Network address translation (NAT)

Intrusion detection system (IDS)

What is the purpose of enforcing SMB signing?

To increase the speed of SMB transfers

To prevent man-in-the-middle attacks that could modify SMB traffic and facilitate enumeration or data theft

To allow anonymous access to SMB shares

To encrypt all SMB traffic to ensure confidentiality

A network administrator wants to prevent external attackers from port scanning the company's public-facing servers while still allowing legitimate traffic on ports 80 and 443. Which firewall configuration is most effective?

Block all inbound traffic except ports 80 and 443 from any source.

Allow all inbound traffic but log it for analysis.

Use a stateful firewall that allows all established connections.

Set the firewall to drop all ICMP traffic only.

A multinational company operates a public DNS infrastructure that must serve both internal and external queries. The security team has identified that attackers are performing DNS zone transfers and querying for internal hostnames. The company wants to prevent this while maintaining DNS resolution for employees and external customers. Which approach is the most effective?

Implement split-horizon DNS with separate internal and external zones, restrict zone transfers to authorized secondary servers, and enable DNSSEC on the external zone.

Disable recursion on the public DNS server and block all zone transfers, but keep the same zone for internal and external queries.

Enable DNSSEC on the internal zone and use a non-standard port for DNS queries to obscure the service.

Use a single DNS zone for all queries and allow zone transfers only from the primary server's IP address.

EC-CouncilCertified Ethical Hacker

Domain 2Objective 7

Enumeration Countermeasures CEH Practice Questions (Page 5)

Part of the Reconnaissance Techniques domain, which makes up ~14% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~13–22 in this domain), expect 2–3 from this objective — we provide 65 practice questions to prepare you well beyond it. (estimate)

65questions here

13free pages

16concepts

16 Concepts in This Objective

Enumeration Countermeasures Overview
Network Enumeration Countermeasures
Port Scanning Countermeasures
Service Enumeration Countermeasures
SNMP Enumeration Countermeasures
DNS Enumeration Countermeasures
Active Directory Enumeration Countermeasures
SMB Enumeration Countermeasures
LDAP Enumeration Countermeasures
Email Enumeration Countermeasures
User Enumeration Countermeasures
Web Enumeration Countermeasures
Wireless Enumeration Countermeasures
Cloud Enumeration Countermeasures
IoT Enumeration Countermeasures
Enumeration Countermeasure Tools and Techniques

Questions 21–25

21foundation · easy
What is the purpose of restricting directory browsing on a web server?
Select an answer first
22foundation · easy
Which technology is specifically designed to detect and alert on port scanning activity?
Select an answer first
23foundation · easy
What is the purpose of enforcing SMB signing?
Select an answer first
24application · medium
A network administrator wants to prevent external attackers from port scanning the company's public-facing servers while still allowing legitimate traffic on ports 80 and 443. Which firewall configuration is most effective?
Select an answer first
25expert · hard
A multinational company operates a public DNS infrastructure that must serve both internal and external queries. The security team has identified that attackers are performing DNS zone transfers and querying for internal hostnames. The company wants to prevent this while maintaining DNS resolution for employees and external customers. Which approach is the most effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.