Which practice is an example of using network segmentation to limit enumeration?

Configuring all hosts to use the same subnet mask

Disabling all network switches to prevent any communication

Placing sensitive servers in a separate VLAN with strict access control lists (ACLs)

Using a single flat network to simplify administration and reduce complexity

What is the recommended practice for SNMP community strings to prevent enumeration?

Disable SNMP entirely on all devices

Use strong, complex community strings that are difficult to guess

Use the default community string 'public' for read-only access

Set the community string to the device's hostname for easy recall

A company's login page returns 'Invalid username' when the username is wrong and 'Invalid password' when the password is wrong. The security team wants to prevent user enumeration but also wants to help legitimate users remember their passwords. Which approach best balances security and usability?

Keep the specific error messages but add a CAPTCHA after several failed attempts.

Lock the account after one failed login attempt.

Use a generic error message for both invalid username and invalid password.

Display the username in the error message when the password is wrong.

A security administrator is reviewing a Windows network where internal reconnaissance has been observed. The team needs to reduce the attack surface for SMB enumeration while maintaining compatibility with legacy applications that still rely on SMB. Which combination of actions best balances security and compatibility?

Disable SMBv1 and enforce SMB signing on all clients and servers.

Enable SMBv1 but restrict access using IPsec rules.

Set the SMB server to require encryption for all sessions.

Block TCP port 445 at the firewall and disable the SMB service on all workstations.

What is the purpose of rate limiting on email servers as a countermeasure to email enumeration?

To block all incoming emails from unknown senders

To slow down automated attempts to guess valid email addresses

To encrypt all email messages before sending

To increase the speed of email delivery

EC-CouncilCertified Ethical Hacker

Domain 2Objective 7

Enumeration Countermeasures CEH Practice Questions (Page 6)

Part of the Reconnaissance Techniques domain, which makes up ~14% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~13–22 in this domain), expect 2–3 from this objective — we provide 65 practice questions to prepare you well beyond it. (estimate)

65questions here

13free pages

16concepts

16 Concepts in This Objective

Enumeration Countermeasures Overview
Network Enumeration Countermeasures
Port Scanning Countermeasures
Service Enumeration Countermeasures
SNMP Enumeration Countermeasures
DNS Enumeration Countermeasures
Active Directory Enumeration Countermeasures
SMB Enumeration Countermeasures
LDAP Enumeration Countermeasures
Email Enumeration Countermeasures
User Enumeration Countermeasures
Web Enumeration Countermeasures
Wireless Enumeration Countermeasures
Cloud Enumeration Countermeasures
IoT Enumeration Countermeasures
Enumeration Countermeasure Tools and Techniques

Questions 26–30

26foundation · easy
Which practice is an example of using network segmentation to limit enumeration?
Select an answer first
27foundation · easy
What is the recommended practice for SNMP community strings to prevent enumeration?
Select an answer first
28expert · hard
A company's login page returns 'Invalid username' when the username is wrong and 'Invalid password' when the password is wrong. The security team wants to prevent user enumeration but also wants to help legitimate users remember their passwords. Which approach best balances security and usability?
Select an answer first
29application · medium
A security administrator is reviewing a Windows network where internal reconnaissance has been observed. The team needs to reduce the attack surface for SMB enumeration while maintaining compatibility with legacy applications that still rely on SMB. Which combination of actions best balances security and compatibility?
Select an answer first
30foundation · easy
What is the purpose of rate limiting on email servers as a countermeasure to email enumeration?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.