CEHv8 BOOTCAMP: MODULE 04-ENUMERATION_SET-1

Question 1

What does the attacker do in the Enumeration phase?

Answer 1

Create active connections to system and performs directed queries to gain more information about the target.

Question 2

Why do attackers extract information?

Answer 2

To identify system attack points and perform password attacks to gain unauthorized access to information system resources.

Question 3

Enumeration techniques are conducted in what kind of environment?

Answer 3

Intranet environment.

Question 4

What are 6 enumeration techniques?

Answer 4

• Extract user names using email IDs
• Extract user names using SNMP
• Extract user groups from windows
• Extract information using default passwords
• Brute force active directory
• Extract information using DNS Zone Transfer

Question 5

What service is UDP/TCP 53?

Answer 5

DNS Zone Transfer

Question 6

What service is UDP/TCP 135?

Answer 6

MS RPC Endpoint Mapper

Question 7

What service is UDP/TCP 137?

Answer 7

NetBIOS Name Service (NBNS)

Question 8

What service is UDP/TCP 139?

Answer 8

NetBIOS Session Service (SMB Over)

Question 9

What service is TCP 445?

Answer 9

SMB Over TCP (Direct Host)

Question 10

What service is UDP 161?

Answer 10

Simple Network Management Protocol (SNMP)

Question 11

What service is UDP/TCP 389?

Answer 11

Lightweight Direct Access Protocol (LDAP)

Question 12

What service is UDP/TCP 3368?

Answer 12

Global Catalog Service

Question 13

What service is TCP 25?

Answer 13

Simple Mail Transfer Protocol (SMTP)

Question 14

What service is UDP/TCP 162?

Answer 14

SNMP Trap

Question 15

NetBIOS is a unique 16 ASCII character string used to identify what?

Answer 15

Identify the network devices over TCP/IP.

Question 16

What do attackers use NetBIOS enumeration to obtain?

Answer 16

• List of computers that belong to a Domain.
• List of shares on the individual host on the network.
• Policies and passwords.

Question 17

What does Nbtstat display?

Answer 17

NetBIOS over TCP/IP (NetBT) protocol statistics NetBIOS name tables for both the local computer and remote computers and the NetBIOS name cache.

Question 18

What nbtstat command do you run to get the NetBIOS name table of a remote computer?

Answer 18

“nbtstat.exe –a ”

Question 19

What nbtstat command do you run to display the NetBIOS name cache, the table of NetBIOS names, and their resolved IP addresses?

Answer 19

“nbtstat.exe –c”

Question 20

What is SuperScan?

Answer 20

A connect based TCP port scanner, pinger, and host name resolver.

Question 21

What are 4 NetBIOS Enumeration Tools?

Answer 21

• SuperScan
• Hyena
• Winfingerprint
• NetBIOS Enumerator