Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

CEH v11 Revision > Windows > Flashcards

Windows Flashcards

1
Q

What does the following Windows command do:
net use

A

Lists network shares that the workstation is using, giving information about other systems on the network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What does the following Windows command do:
net group

A

Adds, displays, or modifies global groups in domains.
CAN ONLY BE USE ON DOMAIN CONTROLLERS.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What does the following Windows command do:
net user

A

Adds or modifies user accounts, or displays user account information.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What does the following Windows command do:
net config

A

Allows configuration of servers and workstations services on Windows computers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What does the following command do in Windows:
sc config

A

Modifies the value of a service’s entries in the registry and in the Service Control Manager database.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What does the following command do in Windows:
sc create

A

Creates a subkey and entries for the service in the registry and in the Service Control Manager database.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What does the following command do in Windows:
sc delete

A

Deletes a service subkey from the registry.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is the Security Identifier (SID)?

A

Identifies a user, group or computer account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the Resource Identifier (RID)?

A

Portion of the SID identifying a specific user, group or computer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What number does the Admin user SID end with?

A

500

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What number does a regular user SID end with?

A

1000

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is SAM Database?

A

File where all local encrypted passwords are stored.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Which directory is the SAM Database located in?

A

C:\Windows\System32\Config\

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is nbtstat command used for?

A

Displays protocol statistics and current TCP/IP connections

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What does this command do?

C:\nbtstat -n

A

Displays local information

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What does this command do?

C:\nbtstat -A [IP Address]

A

Displays remote information

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What does this command do?

C:\nbtstat -c

A

Displays cached information

18
Q

What does Windows use for network authentication?

A

Kerberos

19
Q

What are two main weaknesses of LM Hashing?

A
  1. Password splitting in multiple sections if password is longer than 7 characters
  2. If one section is blank, hash will always be the same (AAD3B435B51404EE)
20
Q

What is Ntds.dit in Windows?

A

Database file on a domain controller that stores passwords.

Located:
%SystemRoot%\NTDS\Ntds.dit
OR
%SystemRoot%System32\Ntds.dit

21
Q

What is the 4 step exchange for Kerberos authentication?

A
  1. Client asks Key Distribution Center (KDC) for a ticket
  2. Server responds with Ticket Granting Ticket (TGT)
  3. If client can decrypt it, the TGT is sent back to the server requesting a Ticket Granting Service (TGS) service ticket
  4. Server sends TGS service ticket which client uses to access resources
22
Q

What is the simple explanation of Windows Registries?

A

Collection of settings and configurations that make Windows run - Made up of keys and values.

23
Q

What is the purpose of the following registry keys: HKEY_LOCAL_MACHINE (HKCU)

A

information on hardware and software

24
Q

What is the purpose of the following registry keys: HKEY_CLASSES_ROOT (HKCR)

A

Information on file associates and OLE classes

25
Q

What is the purpose of the following registry keys: HKEY_CURRENT_USER (HKCU)

A

Profile information for the current user including preferences

26
Q

What is the purpose of the following registry keys: HKEY_USERS (HKU)

A

Specific user configuration information for all currently active users

27
Q

What is the purpose of the following registry keys: HKEY_CURRENT_CONFIG (HKCC)

A

Pointer to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\HardwareProfiles\Current

28
Q

What is the MMC in Windows?

A

Microsoft Management Console - To Administer the system

29
Q

What does the following command do?

schtasks change

A

Changes one or more of the following properties of a task

30
Q

What does the following command do?

schtasks create

A

Schedules a new task.

31
Q

What does the following command do?

schtasks delete

A

Deletes a scheduled task.

32
Q

What does the following command do?

schtasks end

A

Stops a program started by a task.

33
Q

What does the following command do?

schtasks query

A

Displays tasks scheduled to run on the computer.

34
Q

What does the following command do?

schtasks run

A

Starts a scheduled task immediately. The run operation ignores the schedule, but uses the program file location, user account, and password saved in the task to run the task immediately.

35
Q

A pentester gains access to a Windows application server and needs to determine the settings of the built-in Windows firewall. Which command would be used?

A

Netsh firewall show config

36
Q

What does GINA stand for?

A

Graphical Identification and Authentication

37
Q

What is happening here?

net use \targetipc$ “” /u:””

A

Null session is being created on Windows using RPC.

38
Q

What is WMI and how do you use it?

A

Windows Management Instrumentation - infrastructure for management data and operations on Windows-based operating systems
Command: wmic

39
Q

What does the sc command stand for?

A

Service Controller

40
Q

What does the following command do:

sc qc

A

Queries the configuration information for a service.

CEH v11 Revision (15 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions