Exam 312-50v13 topic 1 question 154 discussion

Actual exam question from ECCouncil's 312-50v13

Question #: 154
Topic #: 1

A penetration tester is performing an enumeration on a client's network. The tester has acquired permission to perform enumeration activities. They have identified a remote inter-process communication (IPC) share and are trying to collect more information about it. The tester decides to use a common enumeration technique to collect the desired data. Which of the following techniques would be most appropriate for this scenario?

A. Probe the IPC share by attempting to brute force admin credentials
B. Brute force Active Directory
C. Extract usernames using email IDs
D. Conduct a DNS zone transfer

Show Suggested Answer

Suggested Answer: A 🗳️

by Gibsomd at March 16, 2025, 2:28 a.m.

Comments

Submit Cancel

e30b32d

1 month, 1 week ago

Selected Answer: A

A - correct answer - Probe the IPC share by attempting to brute force admin credentials

upvoted 1 times

...

hiddenmessages

2 months, 2 weeks ago

Selected Answer: C

Why would you brute force when the goal is just enumeration? Answer is C

upvoted 1 times

...

killwitch

3 months, 2 weeks ago

Selected Answer: A

A. Probe the IPC share by attempting to brute-force admin credentials Inter-Process Communication (IPC) shares are used for data exchange between processes and can be a common target for enumeration in Windows environments. If misconfigured, IPC shares can leak sensitive information, such as usernames, service accounts, or even password hashes. Brute-forcing admin credentials against the IPC share is a logical step to see if weak or default credentials can be exploited for further access.

upvoted 2 times

...

Gibsomd

3 months, 2 weeks ago

Selected Answer: C

When performing network enumeration or reconnaissance, attackers often try to extract usernames from publicly available data, such as email addresses.

upvoted 1 times

...