An organization is migrating from SNMPv1 to SNMPv3. During the transition, some legacy devices only support SNMPv1. The security team wants to maintain monitoring while reducing enumeration risk. Which approach is most effective?

Keep SNMPv1 on all devices for consistency and use the default community string 'public'.

Use SNMPv3 only on the management station and keep SNMPv1 on all devices.

Run SNMPv3 on all devices that support it, and for legacy devices, use strong community strings and restrict SNMP access by ACL.

Disable SNMP on all legacy devices and rely on syslog for monitoring.

An organization wants to restrict LDAP enumeration so that only authenticated administrators can query directory information. Currently, anonymous binds are allowed. Which configuration change should be implemented?

Disable anonymous LDAP binds and require authentication for all directory queries.

Increase the LDAP server's logging level to capture all queries.

Move all sensitive attributes to a separate directory partition.

Enable LDAPS to encrypt traffic between clients and the directory server.

During a penetration test, an ethical hacker runs the nbtstat command with the -a option against a target IP address. What is the primary purpose of this command?

To list all SMB shares available on the remote host

To query the SNMP MIB tree of the remote host

To enumerate the NetBIOS name table and MAC address of the remote host

To resolve the remote host's fully qualified domain name (FQDN) via DNS

A network administrator is hardening a mixed environment with both SNMP and SMB services. The administrator wants to reduce the risk of enumeration while maintaining necessary functionality. Which set of changes is most effective?

Disable SNMP and SMB on all devices

Use SNMPv3 with strong authentication, and disable SMB1 while requiring SMB signing

Keep SNMPv2c with a strong community string and leave SMB1 enabled

Use SNMPv2c with a complex community string and disable SMB signing

During an internal penetration test, a tester discovers a Windows host with SMB port 445 open. The tester wants to enumerate accessible shares and user accounts. Which tool combination would be most effective for this task?

Use smbclient to list shares and enum4linux to enumerate users

Use ldapsearch to enumerate shares and smbclient to enumerate users

Use nbtstat to list shares and snmpwalk to enumerate users

Use nmap to enumerate shares and net view to enumerate users

EC-CouncilCertified Ethical Hacker

Domain 2Objective 6

Enumeration (NetBIOS, SNMP, LDAP, SMB) CEH Practice Questions (Page 4)

Part of the Reconnaissance Techniques domain, which makes up ~14% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~13–22 in this domain), expect 2–3 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

5concepts

Questions 16–20

16expert · hard
An organization is migrating from SNMPv1 to SNMPv3. During the transition, some legacy devices only support SNMPv1. The security team wants to maintain monitoring while reducing enumeration risk. Which approach is most effective?
Select an answer first
17application · medium
An organization wants to restrict LDAP enumeration so that only authenticated administrators can query directory information. Currently, anonymous binds are allowed. Which configuration change should be implemented?
Select an answer first
18foundation · easy
During a penetration test, an ethical hacker runs the nbtstat command with the -a option against a target IP address. What is the primary purpose of this command?
Select an answer first
19expert · hard
A network administrator is hardening a mixed environment with both SNMP and SMB services. The administrator wants to reduce the risk of enumeration while maintaining necessary functionality. Which set of changes is most effective?
Select an answer first
20application · medium
During an internal penetration test, a tester discovers a Windows host with SMB port 445 open. The tester wants to enumerate accessible shares and user accounts. Which tool combination would be most effective for this task?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.