312-50V10 · Question #85
In the context of Windows Security, what is a 'null' user?
The correct answer is C. A pseudo account that has no username and password. A null user in Windows refers to an anonymous pseudo-account that authenticates with an empty username and empty password, enabling unauthenticated access to certain IPC$ shares. It is not a real user account managed by an administrator.
Question
In the context of Windows Security, what is a 'null' user?
Options
- AA user that has no skills
- BAn account that has been suspended by the admin
- CA pseudo account that has no username and password
- DA pseudo account that was created for security administration purpose
How the community answered
(26 responses)- B4% (1)
- C88% (23)
- D8% (2)
Why each option
A null user in Windows refers to an anonymous pseudo-account that authenticates with an empty username and empty password, enabling unauthenticated access to certain IPC$ shares. It is not a real user account managed by an administrator.
The term 'null' refers to empty credentials used for anonymous authentication, not any attribute related to a user's skills or permissions level.
A suspended or disabled account is an explicitly managed account state set by an administrator - it is a real account, not an anonymous pseudo-account.
A null session is established over the IPC$ share using a blank username and blank password, creating an anonymous connection that in older Windows versions could be used to enumerate users, groups, shares, and registry keys without any credentials.
Null sessions were not created for administrative purposes - they are an unintended legacy feature that exposes information and is considered a security risk to be disabled.
Concept tested: Windows null session anonymous authentication
Source: https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/null-session-pipes-shares-restrict
Topics
Community Discussion
No community discussion yet for this question.