During an internal assessment, a tester discovers an SNMP-enabled network printer. The client wants to know the device's system description, uptime, and network interface details. The tester knows the community string is 'public'. Which command will retrieve the required information?

snmpbulkget -c public -v2c .1.3.6.1.2.1.1

snmpwalk -c public -v2c .1.3.6.1.2.1.1

snmpwalk -c private -v2c .1.3.6.1.2.1.2

snmpget -c public -v2c .1.3.6.1.2.1.1.1.0

A directory administrator is troubleshooting an LDAP enumeration issue. A security tool is able to enumerate users via LDAP, but the administrator wants to block it without breaking the company's single sign-on (SSO) system, which relies on LDAP binds. Which countermeasure is most appropriate?

Block all LDAP traffic from the security tool's IP address.

Enable LDAPS to encrypt all LDAP traffic.

Restrict LDAP read access to only the service accounts that require it, while keeping bind access available for SSO.

A directory administrator wants to prevent anonymous LDAP enumeration of user accounts. The directory currently allows anonymous binds. Which control is most effective?

Change the LDAP port from 389 to 636

Restrict LDAP queries to specific IP addresses using a firewall

Set a complex administrator password

Disable anonymous binds and require authenticated access for all LDAP queries

In SNMP enumeration, what is the role of a community string?

It acts as a password that grants read or write access to the SNMP agent

It defines the port number on which the SNMP agent listens

It is a unique identifier for each MIB object in the SNMP tree

It specifies the encryption algorithm used for SNMPv3 traffic

A security auditor is reviewing SNMP configuration on network devices. The auditor wants to ensure that SNMP community strings are not easily guessable and that SNMP access is restricted. Which configuration change is most effective?

Disable SNMP version 3 and use SNMP version 2c with a complex community string

Allow SNMP access from any host but require a strong community string

Set community strings to a long random string and configure ACLs to allow only management hosts

Change community strings to 'private' for all devices

EC-CouncilCertified Ethical Hacker

Domain 2Objective 6

Enumeration (NetBIOS, SNMP, LDAP, SMB) CEH Practice Questions (Page 6)

Part of the Reconnaissance Techniques domain, which makes up ~14% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~13–22 in this domain), expect 2–3 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

5concepts

Questions 26–30

26application · medium
During an internal assessment, a tester discovers an SNMP-enabled network printer. The client wants to know the device's system description, uptime, and network interface details. The tester knows the community string is 'public'. Which command will retrieve the required information?
Select an answer first
27expert · hard
A directory administrator is troubleshooting an LDAP enumeration issue. A security tool is able to enumerate users via LDAP, but the administrator wants to block it without breaking the company's single sign-on (SSO) system, which relies on LDAP binds. Which countermeasure is most appropriate?
Select an answer first
28application · medium
A directory administrator wants to prevent anonymous LDAP enumeration of user accounts. The directory currently allows anonymous binds. Which control is most effective?
Select an answer first
29foundation · easy
In SNMP enumeration, what is the role of a community string?
Select an answer first
30application · medium
A security auditor is reviewing SNMP configuration on network devices. The auditor wants to ensure that SNMP community strings are not easily guessable and that SNMP access is restricted. Which configuration change is most effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.