312-50V11 · Question #618
While reviewing the result of scanning run against a target network you come across the following: Which among the following can be used to get this output?
The correct answer is D. An SNMP walk. SNMP walk enumerates a device's entire MIB tree and outputs structured OID-value pairs, which matches the tabular network device data shown in the scan output.
Question
While reviewing the result of scanning run against a target network you come across the following:
Which among the following can be used to get this output?
Exhibit
Options
- AA Bo2k system query.
- Bnmap protocol scan
- CA sniffer
- DAn SNMP walk
How the community answered
(47 responses)- A13% (6)
- B6% (3)
- C2% (1)
- D79% (37)
Why each option
SNMP walk enumerates a device's entire MIB tree and outputs structured OID-value pairs, which matches the tabular network device data shown in the scan output.
Bo2k (Back Orifice 2000) is a remote access trojan used for unauthorized system control, not a network enumeration or scanning tool.
An nmap IP protocol scan (-sO) identifies which IP protocols a host supports, not the structured MIB object data produced by SNMP enumeration.
A network sniffer passively captures raw packets off the wire and does not actively query devices to generate structured SNMP MIB enumeration output.
An SNMP walk queries a target device using the SNMP GetNext or GetBulk operation to traverse all OIDs in the Management Information Base (MIB), producing hierarchical output that includes system names, interface descriptions, and network statistics. This type of structured enumeration - distinct from a port scan or packet capture - is the signature output of tools like snmpwalk or snmp-check. It reveals detailed device configuration and network topology information that an attacker can use for reconnaissance.
Concept tested: SNMP enumeration via MIB walk reconnaissance
Source: https://www.cisco.com/c/en/us/support/docs/ip/simple-network-management-protocol-snmp/7282-12.html
Topics
Community Discussion
No community discussion yet for this question.
