During an authorized penetration test, a security analyst discovers that a target Windows server has TCP port 445 open. The analyst wants to enumerate the SMB shares available on that server to identify potential sensitive data exposure. Which tool or technique is most appropriate for this task?

Use the enum4linux tool to enumerate SMB shares and user information

Use Nmap with the -sV option to identify the SMB service version

Use the netstat command on the analyst's local machine to view open ports

Use the ping command to test connectivity to the server

A security auditor needs to determine which operating system is running on a remote host without causing any network disruption. The auditor has permission to scan the host. Which Nmap technique is most appropriate?

Use Nmap's OS fingerprinting with the -O flag

Use a UDP scan to detect OS-specific responses

Use a ping sweep to identify the host's OS

Use a full port scan to identify services and guess the OS

In the ethical hacking methodology, what is the primary purpose of network scanning?

To exploit vulnerabilities found on target systems

To crack passwords of user accounts on the target network

To identify live hosts, open ports, and running services on a target network

To gather personal information about employees from social media

EC-CouncilEthical Hacking Essentials

Domain 3Objective 2

Scanning and Enumeration Methodologies EHE Practice Questions (Page 1)

Part of the Ethical Hacking Methodology domain, which makes up ~12% of our current practice bank.

38questions here

8free pages

6concepts

Questions 1–5

1application · medium
During an internal penetration test, an analyst has identified a Windows host with NetBIOS port 139 open. The analyst needs to enumerate the host's NetBIOS name table and logged-in users. Which tool is most appropriate for this task?
Select an answer first
2application · medium
During an authorized penetration test, a security analyst discovers that a target Windows server has TCP port 445 open. The analyst wants to enumerate the SMB shares available on that server to identify potential sensitive data exposure. Which tool or technique is most appropriate for this task?
Select an answer first
3application · medium
A security auditor needs to determine which operating system is running on a remote host without causing any network disruption. The auditor has permission to scan the host. Which Nmap technique is most appropriate?
Select an answer first
4foundation · easy
Which scanning technique is used to determine which hosts on a network are active by sending ICMP Echo Request packets?
Select an answer first
5foundation · easy
In the ethical hacking methodology, what is the primary purpose of network scanning?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to EHE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “EHE” is a trademark of its owner, used for identification only.

Scanning and Enumeration Methodologies EHE Practice Questions (Page 1)

Questions 1–5

During an internal penetration test, an analyst has identified a Windows host with NetBIOS port 139 open. The analyst needs to enumerate the host's NetBIOS name table and logged-in users. Which tool is most appropriate for this task?

During an authorized penetration test, a security analyst discovers that a target Windows server has TCP port 445 open. The analyst wants to enumerate the SMB shares available on that server to identify potential sensitive data exposure. Which tool or technique is most appropriate for this task?

A security auditor needs to determine which operating system is running on a remote host without causing any network disruption. The auditor has permission to scan the host. Which Nmap technique is most appropriate?

Which scanning technique is used to determine which hosts on a network are active by sending ICMP Echo Request packets?

In the ethical hacking methodology, what is the primary purpose of network scanning?

Keep studying — Ethical Hacking Methodology