You have compromised a lower-level administrator account on an Active Directory network of a small company in Dallas, Texas. You discover Domain Controllers through enumeration. You connect to one…

The correct answer is A. Enumerate domain user accounts and built-in groups. Port 389 is the standard port for LDAP (Lightweight Directory Access Protocol). ldp.exe is a Windows built-in LDAP client tool. Connecting to a Domain Controller on port 389 with ldp.exe allows an attacker to query Active Directory for domain objects - including user accounts…

Submitted by tom_us· Apr 18, 2026Network Forensics

Question

You have compromised a lower-level administrator account on an Active Directory network of a small company in Dallas, Texas. You discover Domain Controllers through enumeration. You connect to one of the Domain Controllers on port 389 using ldp.exe. What are you trying to accomplish here?

Options

AEnumerate domain user accounts and built-in groups
BEnumerate MX and A records from DNS
CEstablish a remote connection to the Domain Controller
DPoison the DNS records with false records

How the community answered

(27 responses)

A
81% (22)
B
7% (2)
C
7% (2)
D
4% (1)

Explanation

Port 389 is the standard port for LDAP (Lightweight Directory Access Protocol). ldp.exe is a Windows built-in LDAP client tool. Connecting to a Domain Controller on port 389 with ldp.exe allows an attacker to query Active Directory for domain objects - including user accounts, groups, organizational units, and other directory information. This is a classic post-compromise enumeration technique. DNS record queries would use port 53; remote shell/RDP would use other ports.

Topics

#Active Directory Enumeration#LDAP#ldp.exe#Network Reconnaissance

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice