Exam 312-50v13 topic 1 question 211 discussion

Actual exam question from ECCouncil's 312-50v13

Question #: 211
Topic #: 1

As a certified ethical hacker, you are tasked with gaining information about an enterprise's internal network. You are permitted to test the network's security using enumeration techniques. You successfully obtain a list of usernames using email IDs and execute a DNS Zone Transfer. Which enumeration technique would be most effective for your next move given that you have identified open TCP ports 25 (SMTP) and 139 (NetBIOS Session Service)?

A. Perform a brute force attack on Microsoft Active Directory to extract valid usernames
B. Exploit the NetBIOS Session Service on TCP port 139 to gain unauthorized access to the file system
C. Use SNMP to extract usernames given the community strings
D. Exploit the NFS protocol on TCP port 2049 to gain control over a remote system

Show Suggested Answer

Suggested Answer: B 🗳️

by mulekule at April 17, 2025, 1:53 a.m.

Comments

Submit Cancel

mulekule

2 weeks, 6 days ago

Selected Answer: B

The most effective enumeration technique in this scenario would be: - NetBIOS Session Service (TCP port 139) is commonly used for file sharing and communication between devices on a network. Exploiting this service can provide access to shared resources, such as files and directories, which may contain valuable information about the network.

upvoted 1 times

...

Exam 312-50v13 All Questions

View all questions & answers for the 312-50v13 exam

Exam 312-50v13 topic 1 question 211 discussion

Comments

mulekule

SY0-701