nerdexam
EC-Council

312-50V12 · Question #172

A penetration tester is performing an enumeration on a client's network. The tester has acquired permission to perform enumeration activities. They have identified a remote inter-process…

The correct answer is A. Probe the IPC share by attempting to brute force admin credentials. The question describes a penetration tester enumerating a remote IPC share to collect more information. The most appropriate technique for this scenario is attempting to brute force administrative credentials against the identified IPC share.

Submitted by renata2k· Mar 4, 2026Network and Perimeter Hacking

Question

A penetration tester is performing an enumeration on a client's network. The tester has acquired permission to perform enumeration activities. They have identified a remote inter-process communication (IPC) share and are trying to collect more information about it. The tester decides to use a common enumeration technique to collect the desired data. Which of the following techniques would be most appropriate for this scenario?

Options

  • AProbe the IPC share by attempting to brute force admin credentials
  • BBrute force Active Directory
  • CExtract usernames using email IDs
  • DConduct a DNS zone transfer

How the community answered

(40 responses)
  • A
    73% (29)
  • B
    8% (3)
  • C
    15% (6)
  • D
    5% (2)

Why each option

The question describes a penetration tester enumerating a remote IPC share to collect more information. The most appropriate technique for this scenario is attempting to brute force administrative credentials against the identified IPC share.

AProbe the IPC share by attempting to brute force admin credentialsCorrect

The IPC$ share is a hidden administrative share on Windows systems used for inter-process communication and remote administration via SMB. A common enumeration technique involves attempting to gain access by brute-forcing common or weak administrative credentials, which, if successful, allows further information gathering about the system and its resources.

BBrute force Active Directory

Brute-forcing Active Directory is a broader attack against the domain controller's authentication system and is not specifically targeted at gathering information from an identified remote IPC share.

CExtract usernames using email IDs

Extracting usernames using email IDs is a passive reconnaissance technique focused on gathering user account information, not an active method to interact with or enumerate an IPC share.

DConduct a DNS zone transfer

Conducting a DNS zone transfer is an enumeration technique used to gather network infrastructure details from DNS records, which is unrelated to collecting information from a remote IPC share.

Concept tested: IPC$ share enumeration via credential attacks

Source: https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-smb/9e009477-9942-494b-944d-5872718e476c

Topics

#IPC$ share#enumeration#network scanning#brute force

Community Discussion

No community discussion yet for this question.

Full 312-50V12 Practice