Which of the following is a recommended countermeasure to reduce the risk of NetBIOS enumeration?

Allow LDAP anonymous binds to simplify directory access

Set SNMP community strings to 'public' for easier management

Disable NetBIOS over TCP/IP on hosts that do not require it

Enable SMB 1.0 for legacy compatibility

A directory administrator needs to prevent LDAP clients from reading sensitive attributes such as passwords or security questions. The directory currently allows authenticated users to read all attributes. Which control should be implemented?

Set attribute-level access control permissions to deny read access to sensitive attributes for non-admin users.

Move sensitive attributes to a separate LDAP server.

Disable anonymous binds on the LDAP server.

Enable LDAPS to encrypt directory traffic.

A network engineer is hardening a fleet of SNMP-enabled devices. The engineer wants to ensure that SNMP queries are only accepted from the management station's IP address. Which configuration should be applied?

Enable SNMPv3 with authentication and privacy.

Change the SNMP community string to a complex value.

Configure SNMP access control lists (ACLs) to allow only the management station's IP.

Disable SNMP traps on the devices.

A network administrator is troubleshooting why a Windows workstation cannot access a file share on a server by NetBIOS name, although the server's IP address is reachable. The administrator runs nbtstat -a SERVER01 and receives 'Host not found'. What is the most likely cause?

The workstation's firewall is blocking NetBIOS traffic

The server's SMB service is disabled

The server's IP address is incorrect in DNS

NetBIOS name resolution is failing because the server's NetBIOS name is not registered in WINS or the local LMHOSTS file

EC-CouncilCertified Ethical Hacker

Domain 2Objective 6

Enumeration (NetBIOS, SNMP, LDAP, SMB) CEH Practice Questions (Page 2)

Part of the Reconnaissance Techniques domain, which makes up ~14% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~13–22 in this domain), expect 2–3 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

5concepts

Questions 6–10

6foundation · easy
Which of the following is a recommended countermeasure to reduce the risk of NetBIOS enumeration?
Select an answer first
7application · medium
A directory administrator needs to prevent LDAP clients from reading sensitive attributes such as passwords or security questions. The directory currently allows authenticated users to read all attributes. Which control should be implemented?
Select an answer first
8application · medium
A network engineer is hardening a fleet of SNMP-enabled devices. The engineer wants to ensure that SNMP queries are only accepted from the management station's IP address. Which configuration should be applied?
Select an answer first
9application · medium
A network administrator is troubleshooting why a Windows workstation cannot access a file share on a server by NetBIOS name, although the server's IP address is reachable. The administrator runs nbtstat -a SERVER01 and receives 'Host not found'. What is the most likely cause?
Select an answer first
10expert · hard
A security analyst is investigating a suspicious host that is responding to NetBIOS name queries but not to SMB requests. The analyst wants to confirm whether the host is a Windows machine and identify its NetBIOS services. Which command will provide the most useful information?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.