nerdexam
EC-Council

312-50V11 · Question #649

Eve is spending her day scanning the library computers. She notices that Alice is using a computer whose port 445 is active and listening. Eve uses the ENUM tool to enumerate Alice machine. From the c

The correct answer is C. Eve is trying to carry out a password crack for user Administrator. Eve is using the ENUM tool against Alice's SMB port (445) to perform a password cracking attempt against the Administrator account.

Enumeration

Question

Eve is spending her day scanning the library computers. She notices that Alice is using a computer whose port 445 is active and listening. Eve uses the ENUM tool to enumerate Alice machine. From the command prompt, she types the following command. What is Eve trying to do?

Options

  • AEve is trying to connect as an user with Administrator privileges
  • BEve is trying to enumerate all users with Administrative privileges
  • CEve is trying to carry out a password crack for user Administrator
  • DEve is trying to escalate privilege of the null user to that of Administrator

How the community answered

(26 responses)
  • A
    8% (2)
  • B
    15% (4)
  • C
    73% (19)
  • D
    4% (1)

Why each option

Eve is using the ENUM tool against Alice's SMB port (445) to perform a password cracking attempt against the Administrator account.

AEve is trying to connect as an user with Administrator privileges

Connecting as Administrator would require already possessing valid credentials, whereas Eve is using ENUM to discover or crack those credentials.

BEve is trying to enumerate all users with Administrative privileges

Enumerating users with administrative privileges is a reconnaissance function that lists group membership, not an attempt to obtain account passwords.

CEve is trying to carry out a password crack for user AdministratorCorrect

The ENUM tool, when invoked with specific syntax targeting port 445, can perform brute-force or dictionary-based password cracking against named accounts like Administrator on Windows systems. The command Eve typed is structured to submit credential attempts against the Administrator account, making this a targeted password attack rather than simple enumeration.

DEve is trying to escalate privilege of the null user to that of Administrator

Privilege escalation of a null user involves token impersonation or local exploit techniques, not ENUM-based password cracking commands.

Concept tested: SMB enumeration and password cracking via ENUM

Source: https://www.eccouncil.org/train-certify/certified-ethical-hacker-ceh/

Topics

#ENUM tool#null session#password cracking#SMB enumeration

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice