CEHv8 BOOTCAMP: MODULE 04-ENUMERATION_SET-2

Question 1

What are 7 features of Super Scan?

Answer 1

• Support for unlimited IP ranges.
• Host detection by multiple ICMP methods.
• TCP SYN and UDP scanning.
• Simple HTML report generation.
• Source port scanning.
• Fast hostname resolving.
• Extensive banner grabbing.
• Extensive Windows host enumeration.

Question 2

What is Hyena?

Answer 2

A GUI product for managing and securing Microsoft Operating Systems that shows shares and user login names for Windows servers and domain controllers.

Question 3

What is Winfingerprint?

Answer 3

A NetBIOS Enumerations tool that:
• Determines OS.
• Enumerate users, groups, shares, SIDs, Transports, sessions, services, service packs and hotfix levels, date and time, disks, and open TCP and UDP ports.

Question 4

What does Hyena display?

Answer 4

Graphical representation of Microsoft Terminal Service, Microsoft Windows Network, Web Client Networks ,etc.

Question 5

What types of devices tend to still have default passwords enabled after install?

Answer 5

• Switches
• Hubs
• Routers

Question 6

What is SNMP Enumeration?

Answer 6

A process of enumerating user accounts and devices on a target system using SNMP.

Question 7

What 2 things does SNMP consist of?

Answer 7

• Manager

* Agent

Question 8

Where are SNMP agents embedded?

Answer 8

On every network device.

Question 9

Where is SNMP the manager installed?

Answer 9

On a separate computer from the agents.

Question 10

What are the 2 passwords that SNMP holds to access and configure the SNMP agent from the management station?

Answer 10

• Read community string

* Read/Write community string

Question 11

In SNMP what is the “Read community string”?

Answer 11

• Public by default

* Allows viewing of device/system configuration.

Question 12

In SNMP what is the “Read/Write community string”?

Answer 12

• Private by default

* Allows remote editing of configuration.

Question 13

Attackers enumerate SNMP to extract what kind of information?

Answer 13

• Network resources such (hosts, routers, devices, shares, etc).
• Network information (ARP tables, routing tables, traffic statistics, device specific information, etc.

Question 14

What is Management Information Base?

Answer 14

A virtual database containing formal description of all the network objects.

Question 15

What are 2 types managed objects in the Management Information Base?

Answer 15

• Scalar objects that define a single object instance.

* Tabular objects that define multiple related object instances that are grouped in MIB tables

Question 16

SNMB uses Management Information Base’s hierarchical namespace containing object identifiers (OIDs) to translate what?

Answer 16

OID Numbers into a human-readable display.

Question 17

What is OpUtil?

Answer 17

Using it’s integrated tool set helps network engineers to monitor, diagnose, and troubleshoot their IT resources.

Question 18

What are 2 examples of SNMP Enumeration Tools?

Answer 18

• OpUtil

* SolarWind’s IP Network Browser

Question 19

What is SolarWind’s IP Network Browser?

Answer 19

A tool that performs network discovery on a single subnet or a range of subnets using ICMP and SNMP.

Question 20

Describe the UNIX/LINUX Enumeration command “finger”?

Answer 20

• Enumerates the user and host.
• Enables you to view the user’s home directory, login time, idle times, office location, and last time they both received or read email.

Question 21

Describe the UNIX/LINUX Enumeration command “rpcinfo”?

Answer 21

• Helps to enumerate the RPC environment.

* RPC protocol allows applications to communicate over the network.