Deck 6: Enumeration

Question 1

Which of the following commands is a powerful enumeration tool included with Windows?

A) NessusWX
B) Nbtstat
C) NetDDE
D) Netmon Agent

Answer 1

B

Question 2

The latest version of Nessus Server and Client can run on Windows,Mac OS X,FreeBSD,and most Linux distributions.

Answer 2

True

Question 3

All of the enumeration techniques that work with older Windows OSs still work with Windows Server 2012.

Answer 3

False

Question 4

A NetBIOS name does not need to be unique on a network.

Question 5

The computer names you assign to Windows systems are called which of the following?

A) AD Names
B) NetBIOS
C) NetDDE
D) IIS

Question 6

The open-source descendant of Nessus is called which of the following?

A) NW
B) WNessus
C) OpenVAS
D) WinNessus

Question 7

NBTscan is a utility that can be used for enumerating Windows OSs.

Question 8

NTFS was implemented to replace FAT16 and FAT32 because of the difficulty in incorporating security in these file systems.

Question 9

What version of Windows Server has completely eliminated the option for telnet server?

A) Windows Server 2012
B) Windows Server 2003
C) Windows Server 2016
D) Windows Server 2008

Question 10

A well documented Window's OS vulnerability was null sessions.What Windows operating system was the first to disable null sessions by default?

A) Windows Server 2012
B) Windows Server 2008
C) Windows Server 2003
D) Windows 8.1

Question 11

What type of unauthenticated connection is considered to be a significant vulnerability of NetBIOS systems?

A) null session
B) exit session
C) null system
D) net session

Question 12

What boot loader will allow your computer or laptop to start in both Windows and Linux?

A) BASH
B) BIOS
C) X500
D) GRUB

Question 13

Which Windows 10 feature uses virtualization to protect access tokens from theft by attackers?

A) VGuard
B) Token Guard
C) Device Check
D) Credential Guard

Question 14

Which of the following commands gives you a quick way to see if there are any shared resources on a computer or server?

A) Nbtstat
B) Net view
C) NetDDE
D) Netmon Agent

Question 15

What enumeration tool is extremely useful when working with Windows NT,2000,and Windows XP systems?

A) DumpWare
B) NetWare
C) DumpSec
D) NetSec

Question 16

What feature implemented in Windows 8.1 prevents the execution of non-trusted boot content,preventing rootkits?

A) Windows Defender
B) BIOS Check
C) SecureBoot
D) VGuard

Question 17

What type of Windows Server is the most likely server to be targeted by a computer hacker?

A) File Server
B) DNS Server
C) DHCP Server
D) Domain Controller

Question 18

Windows Server 2012 introduced what protection feature to prevent pass-the-hash attacks?

A) Containers
B) Authentication Silos
C) Attack Surface
D) AppLocker

Question 19

What feature implemented in Windows Server 2016 allows for application isolation to protect applications from one another?

A) Windows Boxes
B) Windows VMs
C) Windows NT
D) Windows Containers

Question 20

Which of the following is an excellent GUI tool for managing Windows OSs and is capable of displaying graphical representations of several areas?

A) IIS
B) Zion
C) NetDDE
D) Hyena

Question 21

What security feature was extended to the OS to alert the user when an application is launched on a Windows 8.1 computer?

A) Data Execution Prevention
B) Windows Defender
C) SmartScreen
D) LDAP

Question 22

List at least eight variations of UNIX.

Question 23

Why is enumeration a more intrusive process than port scanning or footprinting?

Question 24

To determine what resources or shares are on a network,security testers must use port scanning and what other procedure first to determine what OS is being used?

A) footprinting
B) back scanning
C) mapping
D) port analysis

Question 25

If you do not have access to Nessus,what NMap procedure can be used to help you to gain information about remote *nix hosts?

A) script analysis
B) script scanning
C) snmp pinging
D) range ping

Question 26

What is a "null session" and how does it relate to Window's systems?

Question 27

Which on of the following is an older network management service that is useful for network administrators that want to view system statistics,version numbers,and other detailed host information remotely?

A) SNMP
B) TFTP
C) FTP
D) SSL

Question 28

What upper-level service is required to utilize file and printer sharing in Windows?

A) Server Message Block
B) Server Message App
C) Print Server App
D) File Message Block

Question 29

What process allows a security professional to extract valuable information,such as information about users and recent login times from a network?

A) mapping
B) port analysis
C) enumeration
D) back scanning

Question 30

Why is understanding the protocol "Simple Network Management Protocol" important for security professionals?

Question 31

What is the primary purpose of enumeration,and give three examples of information that can be acquired through enumeration?

Question 32

What is Hyena and what can it be used for?

Question 33

SNMPWalk is a tool useful in enumerating hosts running SNMP with what type of configuration?

A) open
B) administrator
C) advanced
D) default

Question 34

What does the "NBT" part of "NBTscan" stand for?

A) NetBIOS Transfer
B) NetBIOS over TCP/IP
C) NetBIOS Test
D) NetBIOS over Transport

Question 35

Why do hackers pay attention to NetBIOS computer name suffixes?

Question 36

Which of the following is a useful enumeration tool that enables you to find out who is logged into a *nix system with one simple command?

A) Net utility
B) Finger utility
C) Nix utility
D) Point utility

Question 37

What is DumpSec and what can it be used for?

Question 38

What is the Net view command and how can you use it?

Question 39

Which of the following is a Windows programming interface that allows computers to communicate across a local area network (LAN)?

A) NetBIOS
B) BIOS
C) NetApp
D) NetAPI

Question 40

What is the purpose of the Network Basic Input/Output System (NetBIOS)found in Window's system?

Question 41

Match each item with a statement below.a.Windows 95
b.NetBIOS
c.Windows Server 2012
d.null session
e.SNMP
f.enumeration
g.Windows Vista
h.Windows 7
i.Windows 10
j.Windows Server 2016
Builds on the security advances made in Vista with the introduction of AppLocker

Question 42

Match each item with a statement below.a.Windows 95
b.NetBIOS
c.Windows Server 2012
d.null session
e.SNMP
f.enumeration
g.Windows Vista
h.Windows 7
i.Windows 10
j.Windows Server 2016
Process of extracting critical information from a network

Question 43

Match each item with a statement below.a.Windows 95
b.NetBIOS
c.Windows Server 2012
d.null session
e.SNMP
f.enumeration
g.Windows Vista
h.Windows 7
i.Windows 10
j.Windows Server 2016
Unauthenticated connection to a Windows computer that uses no logon and password values.

Question 44

Match each item with a statement below.a.Windows 95
b.NetBIOS
c.Windows Server 2012
d.null session
e.SNMP
f.enumeration
g.Windows Vista
h.Windows 7
i.Windows 10
j.Windows Server 2016
An older network management service which enables remote administration and run on both Windows and *nix systems

Question 45

Match each item with a statement below.a.Windows 95
b.NetBIOS
c.Windows Server 2012
d.null session
e.SNMP
f.enumeration
g.Windows Vista
h.Windows 7
i.Windows 10
j.Windows Server 2016
First Windows version to introduce User Account Control and BitLocker

Question 46

Match each item with a statement below.a.Windows 95
b.NetBIOS
c.Windows Server 2012
d.null session
e.SNMP
f.enumeration
g.Windows Vista
h.Windows 7
i.Windows 10
j.Windows Server 2016
Introduces Windows Containers to allow for application isolation to protect applications from one another

Question 47

Match each item with a statement below.a.Windows 95
b.NetBIOS
c.Windows Server 2012
d.null session
e.SNMP
f.enumeration
g.Windows Vista
h.Windows 7
i.Windows 10
j.Windows Server 2016
Designed for use on tablets and traditional PCs and only allows trusted applications by default through Device Guard

Question 48

Match each item with a statement below.a.Windows 95
b.NetBIOS
c.Windows Server 2012
d.null session
e.SNMP
f.enumeration
g.Windows Vista
h.Windows 7
i.Windows 10
j.Windows Server 2016
The first Microsoft GUI product that didn't rely on DOS

Question 49

Match each item with a statement below.a.Windows 95
b.NetBIOS
c.Windows Server 2012
d.null session
e.SNMP
f.enumeration
g.Windows Vista
h.Windows 7
i.Windows 10
j.Windows Server 2016
Windows programming interface that allows computers to communicate across a local area network

Question 50

Match each item with a statement below.a.Windows 95
b.NetBIOS
c.Windows Server 2012
d.null session
e.SNMP
f.enumeration
g.Windows Vista
h.Windows 7
i.Windows 10
j.Windows Server 2016
Introduced Authentication Silos to prevent pass-the-hash attacks