312-50V11 · Question #649
Eve is spending her day scanning the library computers. She notices that Alice is using a computer whose port 445 is active and listening. Eve uses the ENUM tool to enumerate Alice machine. From the c
The correct answer is C. Eve is trying to carry out a password crack for user Administrator. Eve is using the ENUM tool against Alice's SMB port (445) to perform a password cracking attempt against the Administrator account.
Question
Eve is spending her day scanning the library computers. She notices that Alice is using a computer whose port 445 is active and listening. Eve uses the ENUM tool to enumerate Alice machine. From the command prompt, she types the following command. What is Eve trying to do?
Options
- AEve is trying to connect as an user with Administrator privileges
- BEve is trying to enumerate all users with Administrative privileges
- CEve is trying to carry out a password crack for user Administrator
- DEve is trying to escalate privilege of the null user to that of Administrator
How the community answered
(26 responses)- A8% (2)
- B15% (4)
- C73% (19)
- D4% (1)
Why each option
Eve is using the ENUM tool against Alice's SMB port (445) to perform a password cracking attempt against the Administrator account.
Connecting as Administrator would require already possessing valid credentials, whereas Eve is using ENUM to discover or crack those credentials.
Enumerating users with administrative privileges is a reconnaissance function that lists group membership, not an attempt to obtain account passwords.
The ENUM tool, when invoked with specific syntax targeting port 445, can perform brute-force or dictionary-based password cracking against named accounts like Administrator on Windows systems. The command Eve typed is structured to submit credential attempts against the Administrator account, making this a targeted password attack rather than simple enumeration.
Privilege escalation of a null user involves token impersonation or local exploit techniques, not ENUM-based password cracking commands.
Concept tested: SMB enumeration and password cracking via ENUM
Source: https://www.eccouncil.org/train-certify/certified-ethical-hacker-ceh/
Topics
Community Discussion
No community discussion yet for this question.