Exam 312-50v12 topic 1 question 211 discussion

B. Exploit the NetBIOS SNMP uses UDP ports 161 and 162

CEH v12 page : 411 NetBIOS is considered first for enumeration because it extracts a large amount of sensitive information about the target network, such as users and network shares.

A Brute force active directory, it is the 3rd step in techniques for enumeration : CEH V12 Module 4 Page 403

A Nothing about 161 and 162, B is a attack..that leave us with A :validate the usernames

CEHv12 page number 404

Enumeration is the key - C

You already have usernames so.... Am I missing something?

GUYS AGAIN i repeat answers is C go to page 403,404 and check you will find its clear the steps they are six

You need to validate your usernames. You can do this brute forcing Active Directory. Module 4: Techniques for Enumeration section - ▪ Brute force Active Directory Microsoft Active Directory is susceptible to username enumeration at the time of user-supplied input verification. This is a design error in the Microsoft Active Directory implementation. If a user enables the “logon hours” feature, then all the attempts at service authentication result in different error messages. Attackers take advantage of this to enumerate valid usernames. An attacker who succeeds in extracting valid usernames can conduct a brute-force attack to crack the respective passwords.

A, We already extracted emails usernames- "successfully obtained a list of usernames using email IDs and execute a DNS Zone Transfer" the next would be A now to exploit netbios.

according to CEHv12 they follow systematic flow shown clearly on the table pg 403 1-6 so C get Techniques for Enumeration step six last step is Extract usernames using SNMP

I'd choose C because exploitation and brute force attacks are typically considered post-enumeration activities and consider too invasive to be "enumeration" activity

just pay attention, the question asking for "Which enumeration technique", not about perform attack or exploit something

c, check ceh v12 pg 403