A network administrator discovers that an SNMP-enabled printer is responding to snmpwalk queries with the community string 'public'. The printer is on a segmented management network. What is the most appropriate immediate action to reduce the risk of SNMP enumeration?

Disable SNMP entirely on the printer

Move the printer to a different VLAN with no access to the management network

Set the SNMP community string to 'private'

Change the SNMP community string to a strong, non-default value on the printer

A penetration tester is assessing a Windows domain controller that has SMB1 disabled and NetBIOS over TCP/IP disabled. The tester wants to enumerate domain users. Which approach is most likely to succeed?

Use nbtstat to enumerate users via NetBIOS

Use ldapsearch to query the domain controller's LDAP service

Use smbclient to list shares and then extract users from share names

Use enum4linux to enumerate users via SMB

A security administrator is configuring an LDAP server to prevent enumeration of sensitive attributes such as employee IDs. The administrator wants to allow users to authenticate but not to read other users' sensitive attributes. Which configuration is most appropriate?

Set the sensitive attributes to be non-readable by regular users

Encrypt LDAP traffic with LDAPS

Change the LDAP port to a non-standard port

EC-CouncilCertified Ethical Hacker

Domain 2Objective 6

Enumeration (NetBIOS, SNMP, LDAP, SMB) CEH Practice Questions (Page 1)

Part of the Reconnaissance Techniques domain, which makes up ~14% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~13–22 in this domain), expect 2–3 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

5concepts

Questions 1–5

1foundation · easy
Which tool is specifically designed to enumerate SMB shares, users, and system information from Windows and Samba hosts?
Select an answer first
2application · medium
A security analyst is investigating a potential NetBIOS-based attack. The analyst wants to see the local NetBIOS name cache and the names that the local machine has recently resolved. Which nbtstat command should be used?
Select an answer first
3application · medium
A network administrator discovers that an SNMP-enabled printer is responding to snmpwalk queries with the community string 'public'. The printer is on a segmented management network. What is the most appropriate immediate action to reduce the risk of SNMP enumeration?
Select an answer first
4expert · hard
A penetration tester is assessing a Windows domain controller that has SMB1 disabled and NetBIOS over TCP/IP disabled. The tester wants to enumerate domain users. Which approach is most likely to succeed?
Select an answer first
5application · medium
A security administrator is configuring an LDAP server to prevent enumeration of sensitive attributes such as employee IDs. The administrator wants to allow users to authenticate but not to read other users' sensitive attributes. Which configuration is most appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Enumeration (NetBIOS, SNMP, LDAP, SMB) CEH Practice Questions (Page 1)

Questions 1–5

Which tool is specifically designed to enumerate SMB shares, users, and system information from Windows and Samba hosts?

A security analyst is investigating a potential NetBIOS-based attack. The analyst wants to see the local NetBIOS name cache and the names that the local machine has recently resolved. Which nbtstat command should be used?

A network administrator discovers that an SNMP-enabled printer is responding to snmpwalk queries with the community string 'public'. The printer is on a segmented management network. What is the most appropriate immediate action to reduce the risk of SNMP enumeration?

A penetration tester is assessing a Windows domain controller that has SMB1 disabled and NetBIOS over TCP/IP disabled. The tester wants to enumerate domain users. Which approach is most likely to succeed?

A security administrator is configuring an LDAP server to prevent enumeration of sensitive attributes such as employee IDs. The administrator wants to allow users to authenticate but not to read other users' sensitive attributes. Which configuration is most appropriate?

Keep studying — Reconnaissance Techniques