Why is hiding server headers an effective countermeasure against web enumeration?

It prevents SQL injection attacks on web forms

It prevents attackers from identifying the web server software and version, which they could use to find known vulnerabilities

It blocks all directory browsing on the server

It encrypts all web traffic between the client and server

An Active Directory environment was found to be vulnerable to enumeration via LDAP, SMB, and unauthenticated queries. The security team wants to harden the environment without breaking legitimate authentication. Select all that apply. Which actions are appropriate?

Enforce SMB signing on all domain controllers.

Restrict LDAP access to authenticated users only.

Disable SMB entirely on all servers.

Enable LDAP over TLS to protect credentials in transit.

A security team wants to detect and log enumeration attempts against their network, including port scans and service probes, without disrupting normal operations. Which tool or technique should they deploy?

Deploy a network-based intrusion detection system (IDS) that monitors traffic patterns and alerts on port scan signatures.

Install a host-based firewall on each server and block all inbound traffic except from known IP addresses.

Use a vulnerability scanner to periodically scan the network for open ports and services.

Configure a honeypot that mimics a vulnerable service and log all connections to it.

A directory services administrator notices that anonymous LDAP queries are returning a list of all user names and group memberships. The administrator wants to prevent this information disclosure while still allowing authenticated applications to query the directory. Which configuration should be applied?

Change the LDAP port from 389 to a non-standard port and keep anonymous binds enabled.

Use LDAPS for all connections and allow anonymous binds only from the internal management subnet.

Disable anonymous binds on the LDAP server and require TLS for all LDAP connections, then review and tighten access controls on directory objects.

Enable anonymous binds but restrict them to read-only access and disable TLS to reduce overhead.

A company has a flat network with no segmentation. An attacker who compromised one workstation was able to enumerate all other hosts and services. The security team wants to reduce the impact of such compromises. Which approach is most effective?

Use a SIEM to monitor for enumeration attempts.

Install a host-based firewall on each workstation.

Implement network segmentation with firewalls between departments.

EC-CouncilCertified Ethical Hacker

Domain 2Objective 7

Enumeration Countermeasures CEH Practice Questions (Page 7)

Part of the Reconnaissance Techniques domain, which makes up ~14% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~13–22 in this domain), expect 2–3 from this objective — we provide 65 practice questions to prepare you well beyond it. (estimate)

65questions here

13free pages

16concepts

16 Concepts in This Objective

Enumeration Countermeasures Overview
Network Enumeration Countermeasures
Port Scanning Countermeasures
Service Enumeration Countermeasures
SNMP Enumeration Countermeasures
DNS Enumeration Countermeasures
Active Directory Enumeration Countermeasures
SMB Enumeration Countermeasures
LDAP Enumeration Countermeasures
Email Enumeration Countermeasures
User Enumeration Countermeasures
Web Enumeration Countermeasures
Wireless Enumeration Countermeasures
Cloud Enumeration Countermeasures
IoT Enumeration Countermeasures
Enumeration Countermeasure Tools and Techniques

Questions 31–35

31foundation · easy
Why is hiding server headers an effective countermeasure against web enumeration?
Select an answer first
32expert · hard · select all that apply
An Active Directory environment was found to be vulnerable to enumeration via LDAP, SMB, and unauthenticated queries. The security team wants to harden the environment without breaking legitimate authentication. Select all that apply. Which actions are appropriate?
Select an answer first
33application · medium
A security team wants to detect and log enumeration attempts against their network, including port scans and service probes, without disrupting normal operations. Which tool or technique should they deploy?
Select an answer first
34application · medium
A directory services administrator notices that anonymous LDAP queries are returning a list of all user names and group memberships. The administrator wants to prevent this information disclosure while still allowing authenticated applications to query the directory. Which configuration should be applied?
Select an answer first
35expert · hard
A company has a flat network with no segmentation. An attacker who compromised one workstation was able to enumerate all other hosts and services. The security team wants to reduce the impact of such compromises. Which approach is most effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.