Enumeration Countermeasures CEH Practice Questions (Page 9)

Questions 41–45

1. 41application · medium

   A manufacturing facility has deployed hundreds of IoT sensors that use default credentials and are directly connected to the corporate network. A security assessment found that an attacker could enumerate and control the devices. The facility must keep the sensors operational. Which action should be prioritized?

   • AKeep the default credentials for ease of management and rely on the corporate firewall to block external access to the sensors.
   • BChange the default credentials on all IoT devices, disable any unused services, and place the sensors on a separate network segment with strict firewall rules.
   • CEnable MAC filtering on the IoT network and leave all other settings unchanged.
   • DDisable the IoT devices' network connectivity and collect data manually.
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   A company uses LDAP for directory services. An external penetration test revealed that anonymous binds are allowed, and the tester could enumerate usernames and group memberships. The company still needs to allow authenticated applications to query the directory. Which configuration change should be made first?

   • ADisable anonymous binds and require TLS for all LDAP connections.
   • BMove all LDAP data to a public cloud directory.
   • CKeep anonymous binds enabled but restrict them to read-only access.
   • DEnable LDAPS but leave anonymous binds enabled.
   Reveal Solution Discussion Select an answer first
4. 43expert · hard

   A company uses a public cloud provider and has a mix of public and private resources. The security team wants to prevent enumeration of their cloud resources while maintaining public access to a web application. Which combination of controls is most effective?

   • APlace all resources in a private subnet and use a VPN for the web application.
   • BDisable logging and monitoring to reduce the attack surface.
   • CUse network security groups to restrict traffic and IAM policies to limit who can list resources.
   • DRely on the cloud provider's default security groups.
   Reveal Solution Discussion Select an answer first
5. 44expert · hard

   A directory services team is migrating from an on-premises LDAP server to a cloud-based identity provider. The team must prevent LDAP enumeration while supporting a large number of legacy applications that use simple bind authentication. Which migration strategy is most effective?

   • AMigrate all applications to use OAuth 2.0 and eliminate LDAP entirely.
   • BAllow anonymous binds for legacy applications and rely on the cloud provider's network security to block external access.
   • CDeploy a cloud LDAP proxy that enforces TLS, disables anonymous binds, and applies rate limiting to all authentication requests.
   • DKeep the on-premises LDAP server and disable TLS to reduce latency for legacy applications.
   Reveal Solution Discussion Select an answer first
6. 45foundation · easy

   Which action is an effective countermeasure to limit SNMP enumeration from external networks?

   • ARestrict SNMP access to specific management hosts using firewall rules
   • BUse SNMPv1 for compatibility with older devices
   • CEnable SNMP on all interfaces to ensure management connectivity
   • DSet the community string to 'private' for read-only access
   Reveal Solution Discussion Select an answer first