A security team is hardening a network of SNMP-enabled devices. They must maintain monitoring capabilities but want to prevent enumeration by unauthorized parties. The team has both SNMPv2c and SNMPv3 capable devices. Which strategy best balances security and operational needs?

Keep SNMPv2c with a strong community string and restrict access by ACL

Use SNMPv3 on devices that support it, and use SNMPv2c with strong community strings and ACLs on legacy devices

Use SNMPv3 with authentication and encryption on all devices, and disable SNMPv2c

Disable SNMP on all devices and use a proprietary monitoring agent

A penetration tester is assessing a network that contains both legacy Windows XP systems and modern Windows 10 systems. The tester wants to enumerate SMB shares across the network. Which approach is most likely to succeed across both system types?

Use enum4linux with default settings against all hosts

Use smbclient with the SMB1 protocol option against all hosts

First scan for open SMB ports and then use smbclient with protocol negotiation to each host

Use nbtstat to enumerate shares on all hosts

Which protocol is used by LDAP to securely transmit directory queries and responses over a network?

TCP port 389 for plaintext and TCP port 636 for LDAPS

TCP port 445 for plaintext and TCP port 139 for LDAPS

UDP port 161 for plaintext and UDP port 162 for LDAPS

UDP port 389 for plaintext and UDP port 636 for LDAPS

EC-CouncilCertified Ethical Hacker

Domain 2Objective 6

Enumeration (NetBIOS, SNMP, LDAP, SMB) CEH Practice Questions (Page 5)

Part of the Reconnaissance Techniques domain, which makes up ~14% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~13–22 in this domain), expect 2–3 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

5concepts

Questions 21–25

21expert · hard
A security team is hardening a network of SNMP-enabled devices. They must maintain monitoring capabilities but want to prevent enumeration by unauthorized parties. The team has both SNMPv2c and SNMPv3 capable devices. Which strategy best balances security and operational needs?
Select an answer first
22foundation · easy
Which SMB protocol version introduced end-to-end encryption and is considered more secure than earlier versions?
Select an answer first
23application · medium
A penetration tester is assessing a network that contains both legacy Windows XP systems and modern Windows 10 systems. The tester wants to enumerate SMB shares across the network. Which approach is most likely to succeed across both system types?
Select an answer first
24foundation · easy
Which command-line tool is commonly used to query an LDAP directory to enumerate users, groups, and organizational units?
Select an answer first
25foundation · easy
Which protocol is used by LDAP to securely transmit directory queries and responses over a network?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Enumeration (NetBIOS, SNMP, LDAP, SMB) CEH Practice Questions (Page 5)

Questions 21–25

A security team is hardening a network of SNMP-enabled devices. They must maintain monitoring capabilities but want to prevent enumeration by unauthorized parties. The team has both SNMPv2c and SNMPv3 capable devices. Which strategy best balances security and operational needs?

Which SMB protocol version introduced end-to-end encryption and is considered more secure than earlier versions?

A penetration tester is assessing a network that contains both legacy Windows XP systems and modern Windows 10 systems. The tester wants to enumerate SMB shares across the network. Which approach is most likely to succeed across both system types?

Which command-line tool is commonly used to query an LDAP directory to enumerate users, groups, and organizational units?

Which protocol is used by LDAP to securely transmit directory queries and responses over a network?

Keep studying — Reconnaissance Techniques