MODULE 4: Enumeration

Question 1

What term involves an attacker creating active connections with a target system and performing directed queries to gain more information about the target?

(CONDUCTED IN AN INTRANET ENVIRONMENT)

Answer 1

Enumeration

Question 2

Extracting usernames using email IDs, brute forcing active directory, extracting user groups from windows, extracting info using default passwords, extracting information using DNS zone transfers, and extracting usernames using SNMP are all examples of what?

Answer 2

Enumeration

Question 3

What protocol monitors and manages network devices such as routers or switches and is used to modify the device configs and has network devices report back to the central network management system? (NMS)

Answer 3

SNMP

Question 4

What was the vulnerability of early SNMP?

Answer 4

It passed clear-text passwords over the network.

Question 5

Which version of SNMP finally encrypted username/passwords in order to patch the main vulnerability of SNMP?

a. SNMPv1
b. SNMPv2
c. SNMPv3
d. SNMPv4

Answer 5

c. SNMPv3

Question 6

What NTP tool traces a chain of NTP servers back to the primary source?

Answer 6

ntptrace