ECSA v10: EC-Council Certified Security Analyst v10

By ECCouncil · Question Mode

QuestionQ23

VerifiedNetwork Penetration Testing Methodology – Internal

Sam was asked to perform penetration testing on one of a client’s internal networks. During the testing process, Sam conducted enumeration to collect information about computers in a domain, the shares on individual hosts in the network, policies, and passwords.

Identify the enumeration technique.

Explanation

NetBIOS enumeration targets Windows network services to discover domain computers and network resources such as file and print shares; it can also expose account and policy information useful in password-related assessment. Microsoft’s ShareEnum documentation specifically describes using NetBIOS enumeration to scan computers in accessible domains and display their shares and security settings.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!